https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T07:17:34.048353+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-120332 fkie_cve-2026-120332 2026-11-05T07:17:34.049607+00:00

The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with access to the mail module can inject arbitrary HTML and JavaScript, which is executed in the context of other backend users viewing the mail preview or report.

 https://db.gcve.eu/vuln/ghsa-28j5-vvxh-8mj8 GHSA-28j5-vvxh-8mj8 2026-11-05T07:17:34.049668+00:00

The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with access to the mail module can inject arbitrary HTML and JavaScript, which is executed in the context of other backend users viewing the mail preview or report.