https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:39:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-24008 EUVD-2026-24008 https://cve.radiocsirt.org/vuln/euvd-2026-24008 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24637 <p>The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scripting attacks via blockType (combined with content), align, color, variant and fontID argument of a Gutenberg block.</p> <p>The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scripting attacks via blockType (combined with content), align, color, variant and fontID argument of a Gutenberg block.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24637 https://cve.radiocsirt.org/vuln/ghsa-x8c7-9c7c-54qw <p>The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scripting attacks via blockType (combined with content), align, color, variant and fontID argument of a Gutenberg block.</p> <p>The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scripting attacks via blockType (combined with content), align, color, variant and fontID argument of a Gutenberg block.</p> https://cve.radiocsirt.org/vuln/ghsa-x8c7-9c7c-54qw https://cve.radiocsirt.org/vuln/gsd-2021-24637 gsd-2021-24637 https://cve.radiocsirt.org/vuln/gsd-2021-24637