https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T01:46:26.328758+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2025-60445 fkie_cve-2025-60445 2026-09-29T01:46:26.330587+00:00

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version 4.7.1. The vulnerability exists due to insufficient validation of SVG file uploads in the dayrui/Fcms/Library/Upload.php component, allowing attackers to inject malicious JavaScript code that executes when the uploaded file is viewed.

 https://db.gcve.eu/vuln/ghsa-wpj3-4jp3-mm43 GHSA-wpj3-4jp3-mm43 2026-09-29T01:46:26.330687+00:00

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version 4.7.1. The vulnerability exists due to insufficient validation of SVG file uploads in the dayrui/Fcms/Library/Upload.php component, allowing attackers to inject malicious JavaScript code that executes when the uploaded file is viewed.