https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:36:46.280760+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-284946 EUVD-2026-284946 2026-10-03T09:36:46.342474+00:00 EUVD-2026-284946 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1341 fkie_cve-2024-1341 2026-10-03T09:36:46.342510+00:00

The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's advanced_iframe shortcode in all versions up to, and including, 2024.1 due to the plugin allowing users to include JS files from external sources through the additional_js attribute. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-pg9j-xv4w-ppqv GHSA-pg9j-xv4w-ppqv 2026-10-03T09:36:46.342545+00:00

The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's advanced_iframe shortcode in all versions up to, and including, 2024.1 due to the plugin allowing users to include JS files from external sources through the additional_js attribute. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/gsd-2024-1341 gsd-2024-1341 2026-10-03T09:36:46.342563+00:00 gsd-2024-1341