Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 09:31:28 +0000 CVE-2019-25396 — IPFire 2.21 Core Update 127 Reflected XSS via updatexlrator.cgi https://cve.radiocsirt.org/vuln/cve-2019-25396 <p><strong>Affected:</strong> IPFire</p> <p>IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious scripts through POST parameters. Attackers can submit crafted requests with script payloads in the MAX_DISK_USAGE or MAX_DOWNLOAD_RATE parameters to execute arbitrary JavaScript in users&#39; browsers.</p> <p><strong>Affected:</strong> IPFire</p> <p>IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious scripts through POST parameters. Attackers can submit crafted requests with script payloads in the MAX_DISK_USAGE or MAX_DOWNLOAD_RATE parameters to execute arbitrary JavaScript in users&#39; browsers.</p> https://cve.radiocsirt.org/vuln/cve-2019-25396