https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:27:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341713 EUVD-2026-341713 https://cve.radiocsirt.org/vuln/euvd-2026-341713 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35014 <p>Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidden input field VALUE attribute. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim&#39;s browser when the URL is visited.</p> <p>Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidden input field VALUE attribute. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim&#39;s browser when the URL is visited.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35014 https://cve.radiocsirt.org/vuln/ghsa-8pv6-8844-jf93 <p>Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidden input field VALUE attribute. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim&#39;s browser when the URL is visited.</p> <p>Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidden input field VALUE attribute. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim&#39;s browser when the URL is visited.</p> https://cve.radiocsirt.org/vuln/ghsa-8pv6-8844-jf93