Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 15:09:39 +0000 CVE-2025-71453 — vtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockList https://db.gcve.eu/vuln/cve-2025-71453 <p><strong>Affected:</strong> vtenext</p> <p>vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php that echoes unsanitized widgetId keys from the widgetInfoList JSON parameter. Attackers can induce a logged-in user to submit a crafted POST request with HTML in widgetId keys, executing JavaScript in the victim&#39;s vtenext session.</p> <p><strong>Affected:</strong> vtenext</p> <p>vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php that echoes unsanitized widgetId keys from the widgetInfoList JSON parameter. Attackers can induce a logged-in user to submit a crafted POST request with HTML in widgetId keys, executing JavaScript in the victim&#39;s vtenext session.</p> https://db.gcve.eu/vuln/cve-2025-71453