https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T12:03:15.087333+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292379 EUVD-2026-292379 2026-10-27T12:03:15.089464+00:00 EUVD-2026-292379 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5820 fkie_cve-2026-5820 2026-10-27T12:03:15.089496+00:00

The Zypento Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 1.0.6. This is due to the front-end TOC rendering script reading heading text via `innerText` and inserting it into the page using `innerHTML` without proper sanitization. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-qf7j-x97j-qhrf GHSA-qf7j-x97j-qhrf 2026-10-27T12:03:15.089527+00:00

The Zypento Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 1.0.6. This is due to the front-end TOC rendering script reading heading text via `innerText` and inserting it into the page using `innerHTML` without proper sanitization. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.