https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:03:43 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-50637 <p>UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies.</p> <p>UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-50637 https://vulnerability.circl.lu/vuln/ghsa-hv6m-qj65-26q3 <p><strong>Affected:</strong> Packagist: unopim/unopim</p> <p>UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function.</p> <p>The vulnerability allows attackers to perform XSS in SVG file extension, which can be used to stealing cookies.</p> <p><strong>Affected:</strong> Packagist: unopim/unopim</p> <p>UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function.</p> <p>The vulnerability allows attackers to perform XSS in SVG file extension, which can be used to stealing cookies.</p> https://vulnerability.circl.lu/vuln/ghsa-hv6m-qj65-26q3