https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T19:33:28.124955+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110224 fkie_cve-2026-110224 2026-10-25T19:33:28.126068+00:00

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave() that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing JavaScript in that user's administrative session.

 https://db.gcve.eu/vuln/ghsa-9r6r-wg65-vmq7 GHSA-9r6r-wg65-vmq7 2026-10-25T19:33:28.126135+00:00

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave() that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing JavaScript in that user's administrative session.