https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:08:59 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-101715 cnvd-2021-101715 https://cve.radiocsirt.org/vuln/cnvd-2021-101715 https://cve.radiocsirt.org/vuln/euvd-2026-24081 EUVD-2026-24081 https://cve.radiocsirt.org/vuln/euvd-2026-24081 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24705 <p>The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before outputting them in attributes. This could allow attackers to make a logged in admin edit arbitrary forms with Cross-Site Scripting payloads in them</p> <p>The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before outputting them in attributes. This could allow attackers to make a logged in admin edit arbitrary forms with Cross-Site Scripting payloads in them</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24705 https://cve.radiocsirt.org/vuln/ghsa-5w27-mg8j-wjm2 <p>The NEX-Forms WordPress plugin through 7.9.4 does not escape some of its settings and form fields before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.</p> <p>The NEX-Forms WordPress plugin through 7.9.4 does not escape some of its settings and form fields before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.</p> https://cve.radiocsirt.org/vuln/ghsa-5w27-mg8j-wjm2 https://cve.radiocsirt.org/vuln/gsd-2021-24705 gsd-2021-24705 https://cve.radiocsirt.org/vuln/gsd-2021-24705