https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 06:38:29 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-103641 cnvd-2021-103641 https://cve.radiocsirt.org/vuln/cnvd-2021-103641 https://cve.radiocsirt.org/vuln/euvd-2026-24041 EUVD-2026-24041 https://cve.radiocsirt.org/vuln/euvd-2026-24041 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24642 <p>The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE (via a file upload) as well as XSS</p> <p>The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE (via a file upload) as well as XSS</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24642 https://cve.radiocsirt.org/vuln/ghsa-mm76-wgcc-5xg2 <p>The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE (via a file upload) as well as XSS</p> <p>The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE (via a file upload) as well as XSS</p> https://cve.radiocsirt.org/vuln/ghsa-mm76-wgcc-5xg2 https://cve.radiocsirt.org/vuln/gsd-2021-24642 gsd-2021-24642 https://cve.radiocsirt.org/vuln/gsd-2021-24642