https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:25:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03111 bdu:2021-03111 https://cve.radiocsirt.org/vuln/bdu:2021-03111 https://cve.radiocsirt.org/vuln/cnvd-2021-50116 cnvd-2021-50116 https://cve.radiocsirt.org/vuln/cnvd-2021-50116 https://cve.radiocsirt.org/vuln/euvd-2026-23757 EUVD-2026-23757 https://cve.radiocsirt.org/vuln/euvd-2026-23757 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24294 <p>The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard (wp-admin/admin.php?page=dsgvoaiofree-show-log). This could allow unauthenticated attackers to gain unauthorised access by using an XSS payload to create a rogue administrator account, which will be trigged when an administrator will view the logs.</p> <p>The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard (wp-admin/admin.php?page=dsgvoaiofree-show-log). This could allow unauthenticated attackers to gain unauthorised access by using an XSS payload to create a rogue administrator account, which will be trigged when an administrator will view the logs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24294 https://cve.radiocsirt.org/vuln/ghsa-7mr4-xp7p-pcmc <p>The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard (wp-admin/admin.php?page=dsgvoaiofree-show-log). This could allow unauthenticated attackers to gain unauthorised access by using an XSS payload to create a rogue administrator account, which will be trigged when an administrator will view the logs.</p> <p>The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard (wp-admin/admin.php?page=dsgvoaiofree-show-log). This could allow unauthenticated attackers to gain unauthorised access by using an XSS payload to create a rogue administrator account, which will be trigged when an administrator will view the logs.</p> https://cve.radiocsirt.org/vuln/ghsa-7mr4-xp7p-pcmc https://cve.radiocsirt.org/vuln/gsd-2021-24294 gsd-2021-24294 https://cve.radiocsirt.org/vuln/gsd-2021-24294