https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 05:11:53 +0000 https://db.gcve.eu/vuln/cve-2017-20288 <p><strong>Affected:</strong> QCubed</p> <p>QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter. Attackers can craft GET requests to /assets/php/_devtools/installer/step_2.php with malicious installation_path values echoed unescaped, executing JavaScript in victims&#39; browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.</p> <p><strong>Affected:</strong> QCubed</p> <p>QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter. Attackers can craft GET requests to /assets/php/_devtools/installer/step_2.php with malicious installation_path values echoed unescaped, executing JavaScript in victims&#39; browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.</p> https://db.gcve.eu/vuln/cve-2017-20288