https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T09:36:03.546404+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2017-10825 cnvd-2017-10825 2026-11-13T09:36:03.549128+00:00 cnvd-2017-10825 https://db.gcve.eu/vuln/fkie_cve-2017-7251 fkie_cve-2017-7251 2026-11-13T09:36:03.549177+00:00

A Cross-Site Scripting (XSS) was discovered in pi-engine/pi 2.5.0. The vulnerability exists due to insufficient filtration of user-supplied data (preview) passed to the "pi-develop/www/script/editor/markitup/preview/markdown.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

 https://db.gcve.eu/vuln/ghsa-9v3w-m552-m6ff GHSA-9v3w-m552-m6ff — Pi Cross-site Scripting vulnerability 2026-11-13T09:36:03.549213+00:00

Affected: Packagist: pi/pi

A Cross-Site Scripting (XSS) was discovered in pi-engine/pi 2.5.0. The vulnerability exists due to insufficient filtration of user-supplied data (preview) passed to the `pi-develop/www/script/editor/markitup/preview/markdown.php` URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

 https://db.gcve.eu/vuln/gsd-2017-7251 gsd-2017-7251 2026-11-13T09:36:03.549239+00:00 gsd-2017-7251