https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:27:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-374978 EUVD-2026-374978 https://cve.radiocsirt.org/vuln/euvd-2026-374978 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82451 <p>Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel.</p> <p>Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-82451 https://cve.radiocsirt.org/vuln/ghsa-3p45-hx6j-c7f5 <p>Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel.</p> <p>Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel.</p> https://cve.radiocsirt.org/vuln/ghsa-3p45-hx6j-c7f5