https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 19:59:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-23836 EUVD-2026-23836 https://cve.radiocsirt.org/vuln/euvd-2026-23836 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24444 <p>The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.0.7.2 does not sanitise its Taxonomy description field, allowing high privilege users to set JavaScript payload in them even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue.</p> <p>The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.0.7.2 does not sanitise its Taxonomy description field, allowing high privilege users to set JavaScript payload in them even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24444 https://cve.radiocsirt.org/vuln/ghsa-8c7r-h373-6jrj <p>The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.7.0.2 does not sanitise its Taxonomy description field, allowing high privilege users to set JavaScript payload in them even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue.</p> <p>The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.7.0.2 does not sanitise its Taxonomy description field, allowing high privilege users to set JavaScript payload in them even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue.</p> https://cve.radiocsirt.org/vuln/ghsa-8c7r-h373-6jrj https://cve.radiocsirt.org/vuln/gsd-2021-24444 gsd-2021-24444 https://cve.radiocsirt.org/vuln/gsd-2021-24444