https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 17:33:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-292243 EUVD-2026-292243 https://cve.radiocsirt.org/vuln/euvd-2026-292243 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31013 <p>Dovestones Softwares ADPhonebook &lt;4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim&#39;s browser.</p> <p>Dovestones Softwares ADPhonebook &lt;4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim&#39;s browser.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-31013 https://cve.radiocsirt.org/vuln/ghsa-h9wg-gp29-4whj <p>Dovestones Softwares ADPhonebook &lt;4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim&#39;s browser.</p> <p>Dovestones Softwares ADPhonebook &lt;4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim&#39;s browser.</p> https://cve.radiocsirt.org/vuln/ghsa-h9wg-gp29-4whj