https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:09:31.538625+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-27408 cnvd-2026-27408 2026-10-15T19:09:31.602009+00:00 cnvd-2026-27408 https://cve.radiocsirt.org/vuln/euvd-2026-321671 EUVD-2026-321671 2026-10-15T19:09:31.602064+00:00 EUVD-2026-321671 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8702 fkie_cve-2026-8702 2026-10-15T19:09:31.602088+00:00

The GBI To Print plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the 'div' attribute of the 'gbitoprint' shortcode. This is due to insufficient output escaping in the gbi_toprint_shortcode() function, which concatenates the raw shortcode attribute value directly into an HTML attribute without applying esc_attr() or any other sanitization. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-www3-xfc6-4q8f GHSA-www3-xfc6-4q8f 2026-10-15T19:09:31.602141+00:00

The GBI To Print plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the 'div' attribute of the 'gbitoprint' shortcode. This is due to insufficient output escaping in the gbi_toprint_shortcode() function, which concatenates the raw shortcode attribute value directly into an HTML attribute without applying esc_attr() or any other sanitization. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.