https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 01:19:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-363037 EUVD-2026-363037 https://cve.radiocsirt.org/vuln/euvd-2026-363037 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84477 <p>AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication.</p> <p>AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-84477 https://cve.radiocsirt.org/vuln/ghsa-cr48-hcxm-m4m4 <p>AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication.</p> <p>AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-cr48-hcxm-m4m4