https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T17:33:31.187365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-09989 cnvd-2022-09989 2026-10-10T17:33:31.191212+00:00 cnvd-2022-09989 https://cve.radiocsirt.org/vuln/euvd-2026-24080 EUVD-2026-24080 2026-10-10T17:33:31.191266+00:00 EUVD-2026-24080 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24686 fkie_cve-2021-24686 2026-10-10T17:33:31.191282+00:00

The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

 https://cve.radiocsirt.org/vuln/ghsa-pc73-hr4r-f674 GHSA-pc73-hr4r-f674 2026-10-10T17:33:31.191316+00:00

The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

 https://cve.radiocsirt.org/vuln/gsd-2021-24686 gsd-2021-24686 2026-10-10T17:33:31.191347+00:00 gsd-2021-24686