https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T20:47:42.502520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-3650 CVE-2025-3650 — jQuery Colorbox <= 4.6.3 - Contributor+ Stored XSS 2026-10-15T20:47:42.517732+00:00

Affected: Unknown jQuery Colorbox

The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, allowing users with at least the contributor role to conduct XSS attacks against administrators.