https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:50:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-325852 EUVD-2026-325852 https://cve.radiocsirt.org/vuln/euvd-2026-325852 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46396 <p>HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitization of `&lt;iframe&gt;` elements. The application allows `javascript:` URIs in the `src` attribute, which are executed when a malicious page is viewed. This enables attackers to execute arbitrary JavaScript in the context of the victim’s browser and access sensitive data exposed to client-side scripts. Version 26.0.0 fixes the issue.</p> <p>HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitization of `&lt;iframe&gt;` elements. The application allows `javascript:` URIs in the `src` attribute, which are executed when a malicious page is viewed. This enables attackers to execute arbitrary JavaScript in the context of the victim’s browser and access sensitive data exposed to client-side scripts. Version 26.0.0 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-46396 https://cve.radiocsirt.org/vuln/ghsa-jh3h-rpxg-fr36 <p><strong>Affected:</strong> npm: @haxtheweb/haxcms-nodejs, npm: @haxtheweb/video-player, npm: @haxtheweb/iframe-loader</p> <p>### Summary A stored cross-site scripting (XSS) vulnerability exists in HAX CMS due to improper sanitization of `&lt;iframe&gt;` elements.</p> <p>The application allows `javascript:` URIs in the `src` attribute, which are executed when a malicious page is viewed. This enables attackers to execute arbitrary JavaScript in the context of the victim’s browser and access sensitive data exposed to client-side scripts.</p> <p>### Details Successful exploitation allows access to any data available in the browser context, including:</p> <p>- Authentication tokens (e.g., JWT) - Session cookies (if not protected with HttpOnly) - Application configuration (e.g., window.appSettings) - User-specific data accessible via APIs</p> <p>This significantly increases the impact beyond simple script execution.</p> <p>### PoC Steps to reproduce:</p> <p>1. Log in to HAX CMS as any authenticated user. 2. Create a new page or edit an existing page. 3. Open the HTML source editor (`&lt;&gt;`). 4. Insert the following payload:</p> <p>```html &lt;iframe srcdoc=&#34;&amp;lt;script&amp;gt; (function(){ try { var jwt = parent.window.appSettings.jwt; alert(&#39;Stolen JWT:\n&#39; + jwt); } catch(e) { alert(&#39;Error: &#39; + e.message); } })(); &amp;lt;/script&amp;gt;&#34; style=&#34;display:none&#34; sandbox=&#34;allow-scripts allow-same-origin&#34;&gt;&lt;/iframe&gt; ``` &lt;img width=&#34;2446&#34; height=&#34;1319&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/daea3b41-8c72-4f6c-ab32-34c688bbd251&#34; /&gt;</p> <p>&lt;img width=&#34;2464&#34; height=&#34;1397&#34; alt=&#34;image&#34; src=&#34;https:…</p> <p><strong>Affected:</strong> npm: @haxtheweb/haxcms-nodejs, npm: @haxtheweb/video-player, npm: @haxtheweb/iframe-loader</p> <p>### Summary A stored cross-site scripting (XSS) vulnerability exists in HAX CMS due to improper sanitization of `&lt;iframe&gt;` elements.</p> <p>The application allows `javascript:` URIs in the `src` attribute, which are executed when a malicious page is viewed. This enables attackers to execute arbitrary JavaScript in the context of the victim’s browser and access sensitive data exposed to client-side scripts.</p> <p>### Details Successful exploitation allows access to any data available in the browser context, including:</p> <p>- Authentication tokens (e.g., JWT) - Session cookies (if not protected with HttpOnly) - Application configuration (e.g., window.appSettings) - User-specific data accessible via APIs</p> <p>This significantly increases the impact beyond simple script execution.</p> <p>### PoC Steps to reproduce:</p> <p>1. Log in to HAX CMS as any authenticated user. 2. Create a new page or edit an existing page. 3. Open the HTML source editor (`&lt;&gt;`). 4. Insert the following payload:</p> <p>```html &lt;iframe srcdoc=&#34;&amp;lt;script&amp;gt; (function(){ try { var jwt = parent.window.appSettings.jwt; alert(&#39;Stolen JWT:\n&#39; + jwt); } catch(e) { alert(&#39;Error: &#39; + e.message); } })(); &amp;lt;/script&amp;gt;&#34; style=&#34;display:none&#34; sandbox=&#34;allow-scripts allow-same-origin&#34;&gt;&lt;/iframe&gt; ``` &lt;img width=&#34;2446&#34; height=&#34;1319&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/daea3b41-8c72-4f6c-ab32-34c688bbd251&#34; /&gt;</p> <p>&lt;img width=&#34;2464&#34; height=&#34;1397&#34; alt=&#34;image&#34; src=&#34;https:…</p> https://cve.radiocsirt.org/vuln/ghsa-jh3h-rpxg-fr36