Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 00:06:51 +0000 CVE-2026-33883 — Statamic has Reflected XSS via unescaped redirect parameter in its password reset form tag https://cve.radiocsirt.org/vuln/cve-2026-33883 <p><strong>Affected:</strong> statamic cms</p> <p>Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, the `user:reset_password_form` tag could render user-input directly into HTML without escaping, allowing an attacker to craft a URL that executes arbitrary JavaScript in the victim&#39;s browser. This has been fixed in 5.73.16 and 6.7.2.</p> <p><strong>Affected:</strong> statamic cms</p> <p>Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, the `user:reset_password_form` tag could render user-input directly into HTML without escaping, allowing an attacker to craft a URL that executes arbitrary JavaScript in the victim&#39;s browser. This has been fixed in 5.73.16 and 6.7.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-33883