https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:30:44 +0000 https://cve.radiocsirt.org/vuln/cve-2026-2445 <p><strong>Affected:</strong> WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server</p> <p>The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads.</p> <p>An attacker can leverage this vulnerability to cause the user&#39;s browser to redirect to a malicious website, modify the user interface of the webpage, or retrieve sensitive information from the browser. However, the impact is mitigated for session hijacking as all session-related sensitive cookies are protected by the httpOnly flag.</p> <p><strong>Affected:</strong> WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server</p> <p>The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads.</p> <p>An attacker can leverage this vulnerability to cause the user&#39;s browser to redirect to a malicious website, modify the user interface of the webpage, or retrieve sensitive information from the browser. However, the impact is mitigated for session hijacking as all session-related sensitive cookies are protected by the httpOnly flag.</p> https://cve.radiocsirt.org/vuln/cve-2026-2445