https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:56:28 +0000 https://cve.radiocsirt.org/vuln/cve-2026-48942 <p><strong>Affected:</strong> getk2.org K2 extension for Joomla</p> <p>K2 ≤ 2.26 renders the `#__k2_users.image` column directly into HTML `src` attributes via two distinct templates, in both cases without HTML escaping.</p> <p><strong>Affected:</strong> getk2.org K2 extension for Joomla</p> <p>K2 ≤ 2.26 renders the `#__k2_users.image` column directly into HTML `src` attributes via two distinct templates, in both cases without HTML escaping.</p> https://cve.radiocsirt.org/vuln/cve-2026-48942