https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:19:53.175997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288970 EUVD-2026-288970 2026-10-10T11:19:53.179897+00:00 EUVD-2026-288970 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10383 fkie_cve-2025-10383 2026-10-10T11:19:53.179938+00:00

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with author-level access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-gwqg-2qww-8ghf GHSA-gwqg-2qww-8ghf 2026-10-10T11:19:53.179989+00:00

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with author-level access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.