Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 09:53:22 +0000 cnvd-2021-103567 https://cve.radiocsirt.org/vuln/cnvd-2021-103567 cnvd-2021-103567 https://cve.radiocsirt.org/vuln/cnvd-2021-103567 EUVD-2026-23945 https://cve.radiocsirt.org/vuln/euvd-2026-23945 EUVD-2026-23945 https://cve.radiocsirt.org/vuln/euvd-2026-23945 fkie_cve-2021-24487 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24487 <p>The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving its &#39;Default Text to Display if no tips&#39; setting, and was also lacking sanitisation as well as escaping before outputting it the page. This could allow attacker to make logged in administrators set a malicious payload in it, leading to a Stored Cross-Site Scripting issue</p> <p>The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving its &#39;Default Text to Display if no tips&#39; setting, and was also lacking sanitisation as well as escaping before outputting it the page. This could allow attacker to make logged in administrators set a malicious payload in it, leading to a Stored Cross-Site Scripting issue</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24487 GHSA-r8c2-hqj3-228x https://cve.radiocsirt.org/vuln/ghsa-r8c2-hqj3-228x <p>The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving its &#39;Default Text to Display if no tips&#39; setting, and was also lacking sanitisation as well as escaping before outputting it the page. This could allow attacker to make logged in administrators set a malicious payload in it, leading to a Stored Cross-Site Scripting issue</p> <p>The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving its &#39;Default Text to Display if no tips&#39; setting, and was also lacking sanitisation as well as escaping before outputting it the page. This could allow attacker to make logged in administrators set a malicious payload in it, leading to a Stored Cross-Site Scripting issue</p> https://cve.radiocsirt.org/vuln/ghsa-r8c2-hqj3-228x gsd-2021-24487 https://cve.radiocsirt.org/vuln/gsd-2021-24487 gsd-2021-24487 https://cve.radiocsirt.org/vuln/gsd-2021-24487