https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T10:21:22.903095+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252576 EUVD-2026-252576 2026-10-15T10:21:22.905280+00:00 EUVD-2026-252576 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3650 fkie_cve-2025-3650 2026-10-15T10:21:22.905310+00:00

The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, allowing users with at least the contributor role to conduct XSS attacks against administrators.

 https://cve.radiocsirt.org/vuln/ghsa-x8vx-g6gq-xpj4 GHSA-x8vx-g6gq-xpj4 2026-10-15T10:21:22.905338+00:00

The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, allowing users with at least the contributor role to conduct XSS attacks against administrators.