https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:07:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-99630 cnvd-2021-99630 https://cve.radiocsirt.org/vuln/cnvd-2021-99630 https://cve.radiocsirt.org/vuln/euvd-2026-24019 EUVD-2026-24019 https://cve.radiocsirt.org/vuln/euvd-2026-24019 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24626 <p>The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unauthorised actions. One of AJAX call, remove_css, also does not sanitise or escape the css_id POST parameter before using it in a SQL statement, leading to a SQL Injection</p> <p>The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unauthorised actions. One of AJAX call, remove_css, also does not sanitise or escape the css_id POST parameter before using it in a SQL statement, leading to a SQL Injection</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24626 https://cve.radiocsirt.org/vuln/ghsa-55v2-rhxp-258p <p>The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unauthorised actions. One of AJAX call, remove_css, also does not sanitise or escape the css_id POST parameter before using it in a SQL statement, leading to a SQL Injection</p> <p>The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unauthorised actions. One of AJAX call, remove_css, also does not sanitise or escape the css_id POST parameter before using it in a SQL statement, leading to a SQL Injection</p> https://cve.radiocsirt.org/vuln/ghsa-55v2-rhxp-258p https://cve.radiocsirt.org/vuln/gsd-2021-24626 gsd-2021-24626 https://cve.radiocsirt.org/vuln/gsd-2021-24626