https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:06:01 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71275 <p><strong>Affected:</strong> openshwprojects OpenBK7231T_App</p> <p>OpenBK7231T&#39;s http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, &#34;&lt;h3&gt;OTA requested for %s!&lt;/h3&gt;&#34;, tmpA) with no HTML encoding, allowing a crafted URL such as /ota_exec?host=&lt;script&gt;alert(1)&lt;/script&gt; to execute JavaScript in an authenticated admin&#39;s browser when they click a malicious link.</p> <p><strong>Affected:</strong> openshwprojects OpenBK7231T_App</p> <p>OpenBK7231T&#39;s http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, &#34;&lt;h3&gt;OTA requested for %s!&lt;/h3&gt;&#34;, tmpA) with no HTML encoding, allowing a crafted URL such as /ota_exec?host=&lt;script&gt;alert(1)&lt;/script&gt; to execute JavaScript in an authenticated admin&#39;s browser when they click a malicious link.</p> https://cve.radiocsirt.org/vuln/cve-2026-71275