https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:19:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-23820 EUVD-2026-23820 https://cve.radiocsirt.org/vuln/euvd-2026-23820 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24369 <p>In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is triggered when the form will be edited, for example when an admin reviews it and could lead to privilege escalation.</p> <p>In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is triggered when the form will be edited, for example when an admin reviews it and could lead to privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24369 https://cve.radiocsirt.org/vuln/ghsa-83pg-f5q7-v37g <p>In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is triggered when the form will be edited, for example when an admin reviews it and could lead to privilege escalation.</p> <p>In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is triggered when the form will be edited, for example when an admin reviews it and could lead to privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-83pg-f5q7-v37g https://cve.radiocsirt.org/vuln/gsd-2021-24369 gsd-2021-24369 https://cve.radiocsirt.org/vuln/gsd-2021-24369