https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:56:11.964644+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-22209 CVE-2026-22209 — wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Custom CSS in Style Tag 2026-10-06T00:56:11.966968+00:00

Affected: gVectors wpDiscuz

wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags. Attackers with admin access can inject payloads like </style><script>alert(1)</script> in the custom CSS setting to execute arbitrary JavaScript in user browsers.