Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:28:55 +0000 CVE-2026-78337 — Unrestricted upload of file with dangerous type in Prospero Flow CRM allows stored cross-site scripting via SVG https://cve.radiocsirt.org/vuln/cve-2026-78337 <p><strong>Affected:</strong> Roskus Prospero Flow CRM</p> <p>Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and update company permissions to execute arbitrary JavaScript in the application origin via an SVG document containing an embedded script element.</p> <p><strong>Affected:</strong> Roskus Prospero Flow CRM</p> <p>Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and update company permissions to execute arbitrary JavaScript in the application origin via an SVG document containing an embedded script element.</p> https://cve.radiocsirt.org/vuln/cve-2026-78337