https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T18:21:09.511721+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2015-02095 cnvd-2015-02095 2026-09-29T18:21:10.351989+00:00 cnvd-2015-02095 https://vulnerability.circl.lu/vuln/fkie_cve-2015-4374 fkie_cve-2015-4374 2026-09-29T18:21:10.352066+00:00

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name in the recipient (To) address of an email.

 https://vulnerability.circl.lu/vuln/ghsa-8c9c-rccv-p938 GHSA-8c9c-rccv-p938 2026-09-29T18:21:10.352128+00:00

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name in the recipient (To) address of an email.

 https://vulnerability.circl.lu/vuln/gsd-2015-4374 gsd-2015-4374 2026-09-29T18:21:10.352163+00:00 gsd-2015-4374