https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 05:43:11 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-69141 cnvd-2022-69141 https://cve.radiocsirt.org/vuln/cnvd-2022-69141 https://cve.radiocsirt.org/vuln/euvd-2026-23771 EUVD-2026-23771 https://cve.radiocsirt.org/vuln/euvd-2026-23771 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24349 <p>This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lack of CSRF check, the attack could also be performed via such vector.</p> <p>This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lack of CSRF check, the attack could also be performed via such vector.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24349 https://cve.radiocsirt.org/vuln/ghsa-f672-mxfg-3p82 <p>This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lack of CSRF check, the attack could also be performed via such vector.</p> <p>This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lack of CSRF check, the attack could also be performed via such vector.</p> https://cve.radiocsirt.org/vuln/ghsa-f672-mxfg-3p82 https://cve.radiocsirt.org/vuln/gsd-2021-24349 gsd-2021-24349 https://cve.radiocsirt.org/vuln/gsd-2021-24349