Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 21:18:32 +0000 EUVD-2026-384881 https://cve.radiocsirt.org/vuln/euvd-2026-384881 EUVD-2026-384881 https://cve.radiocsirt.org/vuln/euvd-2026-384881 fkie_cve-2026-107796 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107796 <p>Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in application/query/taggedThreadList.jsp that allows unauthenticated attackers to inject script via unencoded tagID and count parameters. Attackers can craft a link with a script-closing payload in tagID or count, triggered when start exceeds zero, to execute JavaScript in victims&#39; browsers.</p> <p>Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in application/query/taggedThreadList.jsp that allows unauthenticated attackers to inject script via unencoded tagID and count parameters. Attackers can craft a link with a script-closing payload in tagID or count, triggered when start exceeds zero, to execute JavaScript in victims&#39; browsers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-107796 GHSA-4v38-x7vw-xq25 https://cve.radiocsirt.org/vuln/ghsa-4v38-x7vw-xq25 <p>Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in application/query/taggedThreadList.jsp that allows unauthenticated attackers to inject script via unencoded tagID and count parameters. Attackers can craft a link with a script-closing payload in tagID or count, triggered when start exceeds zero, to execute JavaScript in victims&#39; browsers.</p> <p>Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in application/query/taggedThreadList.jsp that allows unauthenticated attackers to inject script via unencoded tagID and count parameters. Attackers can craft a link with a script-closing payload in tagID or count, triggered when start exceeds zero, to execute JavaScript in victims&#39; browsers.</p> https://cve.radiocsirt.org/vuln/ghsa-4v38-x7vw-xq25