Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 04:28:59 +0000 EUVD-2026-23815 https://cve.radiocsirt.org/vuln/euvd-2026-23815 EUVD-2026-23815 https://cve.radiocsirt.org/vuln/euvd-2026-23815 fkie_cve-2021-24425 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24425 <p>The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in it, leading to a Stored Cross-Site Scripting issue, which will be triggered in the plugin&#39;s setting, as well as all front-page of the blog (when the Welcome bar is active)</p> <p>The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in it, leading to a Stored Cross-Site Scripting issue, which will be triggered in the plugin&#39;s setting, as well as all front-page of the blog (when the Welcome bar is active)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24425 GHSA-fc78-8j4r-qq56 https://cve.radiocsirt.org/vuln/ghsa-fc78-8j4r-qq56 <p>The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in it, leading to a Stored Cross-Site Scripting issue, which will be triggered in the plugin&#39;s setting, as well as all front-page of the blog (when the Welcome bar is active)</p> <p>The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in it, leading to a Stored Cross-Site Scripting issue, which will be triggered in the plugin&#39;s setting, as well as all front-page of the blog (when the Welcome bar is active)</p> https://cve.radiocsirt.org/vuln/ghsa-fc78-8j4r-qq56 gsd-2021-24425 https://cve.radiocsirt.org/vuln/gsd-2021-24425 gsd-2021-24425 https://cve.radiocsirt.org/vuln/gsd-2021-24425