https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:43:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-23826 EUVD-2026-23826 https://cve.radiocsirt.org/vuln/euvd-2026-23826 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24452 <p>The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the &#34;extension&#34; parameter in the Extensions dashboard, when the &#39;Anonymously track usage to improve product quality&#39; setting is enabled, as the parameter is output in a JavaScript context without proper escaping. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user&#39;s web browser, which could lead to full site compromise.</p> <p>The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the &#34;extension&#34; parameter in the Extensions dashboard, when the &#39;Anonymously track usage to improve product quality&#39; setting is enabled, as the parameter is output in a JavaScript context without proper escaping. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user&#39;s web browser, which could lead to full site compromise.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24452 https://cve.radiocsirt.org/vuln/ghsa-w3f9-qvj2-72hf <p>The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the &#34;extension&#34; parameter in the Extensions dashboard, when the &#39;Anonymously track usage to improve product quality&#39; setting is enabled, as the parameter is output in a JavaScript context without proper escaping. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user&#39;s web browser, which could lead to full site compromise.</p> <p>The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the &#34;extension&#34; parameter in the Extensions dashboard, when the &#39;Anonymously track usage to improve product quality&#39; setting is enabled, as the parameter is output in a JavaScript context without proper escaping. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user&#39;s web browser, which could lead to full site compromise.</p> https://cve.radiocsirt.org/vuln/ghsa-w3f9-qvj2-72hf https://cve.radiocsirt.org/vuln/gsd-2021-24452 gsd-2021-24452 https://cve.radiocsirt.org/vuln/gsd-2021-24452