https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T16:42:51.559658+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-32vp-pw47-6wpg GHSA-32vp-pw47-6wpg 2026-11-14T16:42:51.561339+00:00

Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when user tries to edit changed entry.

This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.