Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:39:30 +0000 CVE-2026-19434 — Stored Cross-site Scripting in Pentestify finding severity field https://cve.radiocsirt.org/vuln/cve-2026-19434 <p><strong>Affected:</strong> maalfer Pentestify</p> <p>Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding&#39;s severity field, which the frontend interpolates unescaped into class and style attributes when rendering the report.</p> <p><strong>Affected:</strong> maalfer Pentestify</p> <p>Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding&#39;s severity field, which the frontend interpolates unescaped into class and style attributes when rendering the report.</p> https://cve.radiocsirt.org/vuln/cve-2026-19434