https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:48:06 +0000 https://cve.radiocsirt.org/vuln/cve-2026-59238 <p><strong>Affected:</strong> maalfer Pentestify</p> <p>Stored Cross-site Scripting (CWE-79) in the client-side report rendering functions (renderPreview, renderEditor, renderAuditData in js/app.js) in maalfer Pentestify before 1.1.0 allows a remote, authenticated attacker to execute arbitrary JavaScript in the browser of any user who views an affected report via a payload stored in a finding&#39;s images array or a report&#39;s client_logo array, which is interpolated into an &lt;img&gt; src attribute without escaping.</p> <p><strong>Affected:</strong> maalfer Pentestify</p> <p>Stored Cross-site Scripting (CWE-79) in the client-side report rendering functions (renderPreview, renderEditor, renderAuditData in js/app.js) in maalfer Pentestify before 1.1.0 allows a remote, authenticated attacker to execute arbitrary JavaScript in the browser of any user who views an affected report via a payload stored in a finding&#39;s images array or a report&#39;s client_logo array, which is interpolated into an &lt;img&gt; src attribute without escaping.</p> https://cve.radiocsirt.org/vuln/cve-2026-59238