https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 10:25:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-23917 EUVD-2026-23917 https://cve.radiocsirt.org/vuln/euvd-2026-23917 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24504 <p>The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them. Furthermore, no CSRF and capability checks were in place, allowing such attack to be performed either via CSRF or as any user (including unauthenticated)</p> <p>The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them. Furthermore, no CSRF and capability checks were in place, allowing such attack to be performed either via CSRF or as any user (including unauthenticated)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24504 https://cve.radiocsirt.org/vuln/ghsa-pqq6-8mr8-33fw <p>The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them. Furthermore, no CSRF and capability checks were in place, allowing such attack to be performed either via CSRF or as any user (including unauthenticated)</p> <p>The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them. Furthermore, no CSRF and capability checks were in place, allowing such attack to be performed either via CSRF or as any user (including unauthenticated)</p> https://cve.radiocsirt.org/vuln/ghsa-pqq6-8mr8-33fw https://cve.radiocsirt.org/vuln/gsd-2021-24504 gsd-2021-24504 https://cve.radiocsirt.org/vuln/gsd-2021-24504