https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:10:57.501579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-89307 CVE-2026-89307 — HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme 2026-10-09T05:10:57.518883+00:00

Affected: Developers Italia design-scuole-wordpress-theme

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).