Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:58:15 +0000 CVE-2026-28405 — MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions https://cve.radiocsirt.org/vuln/cve-2026-28405 <p><strong>Affected:</strong> MarkUsProject Markus</p> <p>MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses/&lt;:course_id&gt;/assignments/&lt;:assignment_id&gt;/submissions/html_content route reads the contents of a student-submitted file and renders them without sanitization. This issue has been patched in version 2.9.1.</p> <p><strong>Affected:</strong> MarkUsProject Markus</p> <p>MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses/&lt;:course_id&gt;/assignments/&lt;:assignment_id&gt;/submissions/html_content route reads the contents of a student-submitted file and renders them without sanitization. This issue has been patched in version 2.9.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-28405