https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T19:46:33.940362+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-117538 fkie_cve-2026-117538 2026-10-29T19:46:33.959348+00:00

REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authenticated backend user to a crafted link containing a valid CSRF token, executing JavaScript that performs same-origin actions or reads DOM data.

 https://db.gcve.eu/vuln/ghsa-4rfx-xhx7-wf22 GHSA-4rfx-xhx7-wf22 2026-10-29T19:46:33.959423+00:00

REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authenticated backend user to a crafted link containing a valid CSRF token, executing JavaScript that performs same-origin actions or reads DOM data.