<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-692</title><description>Every new CWE-692 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Indico: Cross-Site-Scripting in link fields</title><link>https://agentprime.io/advisories/GHSA-c4wc-ggrj-jg9v/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-c4wc-ggrj-jg9v/</guid><description>indico &lt;3.3.13, fixed in 3.3.13. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:09:41 GMT</pubDate><category>PyPI</category><category>indico</category></item><item><title>league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes</title><link>https://agentprime.io/advisories/GHSA-29pj-957v-52mc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-29pj-957v-52mc/</guid><description>league/commonmark &gt;=1.5.0, &lt;2.9.0, fixed in 2.9.0. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 20:30:39 GMT</pubDate><category>Packagist</category><category>league/commonmark</category></item><item><title>CVE-2024-23569: HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack since the server is not configured with…</title><link>https://agentprime.io/advisories/CVE-2024-23569/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-23569/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2026 13:49:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42214: HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server.</title><link>https://agentprime.io/advisories/CVE-2024-42214/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42214/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2026 13:45:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15295: Ajax Load More &lt;= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2026-15295/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15295/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 19:44:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-20240: Cisco IOS XE Software: A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an…</title><link>https://agentprime.io/advisories/CVE-2025-20240/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20240/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Sep 2025 17:14:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53904: The Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-53904/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53904/</guid><description>CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Jul 2025 17:02:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-49590: CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-49590/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49590/</guid><description>CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Jun 2025 22:14:06 GMT</pubDate><category>CVE</category></item><item><title>UnoPim Stored XSS : Cookie hijacking through Create User function</title><link>https://agentprime.io/advisories/GHSA-cgr4-c233-h733/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-cgr4-c233-h733/</guid><description>unopim/unopim &lt;0.1.5, fixed in 0.1.5. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Nov 2024 18:37:15 GMT</pubDate><category>Packagist</category><category>unopim/unopim</category></item><item><title>CVE-2024-30924: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.</title><link>https://agentprime.io/advisories/CVE-2024-30924/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-30924/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>teler-waf contains detection rule bypass via Entities payload</title><link>https://agentprime.io/advisories/GHSA-p2pf-g8cq-3gq5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-p2pf-g8cq-3gq5/</guid><description>github.com/kitabisa/teler-waf &lt;0.2.0, fixed in 0.2.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Mar 2023 20:37:23 GMT</pubDate><category>Go</category><category>github.com/kitabisa/teler-waf</category></item></channel></rss>