https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:59:42 +0000 https://cve.radiocsirt.org/vuln/cve-2025-67634 <p><strong>Affected:</strong> CISA Software Acquisition Guide Tool</p> <p>The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user&#39;s browser when the user submits the page (clicks &#39;Next&#39;).</p> <p><strong>Affected:</strong> CISA Software Acquisition Guide Tool</p> <p>The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user&#39;s browser when the user submits the page (clicks &#39;Next&#39;).</p> https://cve.radiocsirt.org/vuln/cve-2025-67634