https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:40:25.918253+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-316185 EUVD-2026-316185 2026-10-06T18:40:25.966181+00:00 EUVD-2026-316185 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28561 fkie_cve-2026-28561 2026-10-06T18:40:25.966219+00:00

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum description fields echoed without output escaping across multiple theme template files. On multisite installations or with a compromised admin account, attackers set a forum description containing HTML event handlers that execute when any user views the forum listing.

 https://cve.radiocsirt.org/vuln/ghsa-4595-c58r-mv75 GHSA-4595-c58r-mv75 2026-10-06T18:40:25.966255+00:00

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum description fields echoed without output escaping across multiple theme template files. On multisite installations or with a compromised admin account, attackers set a forum description containing HTML event handlers that execute when any user views the forum listing.