https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:49:44 +0000 https://cve.radiocsirt.org/vuln/cve-2026-74793 <p><strong>Affected:</strong> EmilStenstrom justhtml</p> <p>justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject SVG or MathML elements with event handlers that are cloned and reinserted into output without sanitization, enabling stored or reflected XSS attacks.</p> <p><strong>Affected:</strong> EmilStenstrom justhtml</p> <p>justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject SVG or MathML elements with event handlers that are cloned and reinserted into output without sanitization, enabling stored or reflected XSS attacks.</p> https://cve.radiocsirt.org/vuln/cve-2026-74793