https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:23:19.825858+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-02884 cnvd-2026-02884 2026-10-05T18:23:19.886565+00:00 cnvd-2026-02884 https://cve.radiocsirt.org/vuln/euvd-2026-264851 EUVD-2026-264851 2026-10-05T18:23:19.886604+00:00 EUVD-2026-264851 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9543 fkie_cve-2025-9543 2026-10-05T18:23:19.886619+00:00

The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

 https://cve.radiocsirt.org/vuln/ghsa-pp2x-6q2q-6v58 GHSA-pp2x-6q2q-6v58 2026-10-05T18:23:19.886650+00:00

The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).