https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T18:39:38.196405+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2025-60869 CVE-2025-60869 2026-11-07T18:39:38.197523+00:00

Publii CMS v0.46.5 (build 17089) allows persistent Cross-Site Scripting (XSS) via unsanitized input in configuration fields such as "Site Description" and "Footer Follow Buttons". An attacker can inject arbitrary JavaScript, which is stored in the project and executed in the browsers of remote visitors viewing the generated static site.