<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 06 Oct 2026 13:52:20 +0000</lastBuildDate>
    <item>
      <title>EUVD-2026-326626</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-326626</link>
      <description>EUVD-2026-326626</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-326626</guid>
    </item>
    <item>
      <title>fkie_cve-2026-53737</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2026-53737</link>
      <description>&lt;p&gt;Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. Attackers controlling the connected feed data can inject script that executes in an administrator&amp;#39;s browser when the settings page loads.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. Attackers controlling the connected feed data can inject script that executes in an administrator&amp;#39;s browser when the settings page loads.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2026-53737</guid>
    </item>
    <item>
      <title>GHSA-59cg-pg2j-hj7m</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-59cg-pg2j-hj7m</link>
      <description>&lt;p&gt;Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. Attackers controlling the connected feed data can inject script that executes in an administrator&amp;#39;s browser when the settings page loads.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. Attackers controlling the connected feed data can inject script that executes in an administrator&amp;#39;s browser when the settings page loads.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-59cg-pg2j-hj7m</guid>
    </item>
  </channel>
</rss>
