https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:46:29.346992+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-2304 EUVD-2026-2304 2026-10-12T22:46:29.409003+00:00 EUVD-2026-2304 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3710 fkie_cve-2024-3710 2026-10-12T22:46:29.409035+00:00

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin

 https://cve.radiocsirt.org/vuln/ghsa-fxfr-fmvq-qcv6 GHSA-fxfr-fmvq-qcv6 2026-10-12T22:46:29.409066+00:00

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin

 https://cve.radiocsirt.org/vuln/gsd-2024-3710 gsd-2024-3710 2026-10-12T22:46:29.409084+00:00 gsd-2024-3710