https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:49:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-24223 EUVD-2026-24223 https://cve.radiocsirt.org/vuln/euvd-2026-24223 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24826 <p>The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v &lt; 4.0.1) or Admin+ (v &lt; 4.0.2) users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Please note that such attack is still possible by admin+ in single site blogs by default (but won&#39;t be when the unfiltered_html is disallowed)</p> <p>The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v &lt; 4.0.1) or Admin+ (v &lt; 4.0.2) users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Please note that such attack is still possible by admin+ in single site blogs by default (but won&#39;t be when the unfiltered_html is disallowed)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24826 https://cve.radiocsirt.org/vuln/ghsa-h77p-7f34-7fqv <p>The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v &lt; 4.0.1) or Admin+ (v &lt; 4.0.2) users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Please note that such attack is still possible by admin+ in single site blogs by default (but won&#39;t be when the unfiltered_html is disallowed)</p> <p>The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v &lt; 4.0.1) or Admin+ (v &lt; 4.0.2) users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Please note that such attack is still possible by admin+ in single site blogs by default (but won&#39;t be when the unfiltered_html is disallowed)</p> https://cve.radiocsirt.org/vuln/ghsa-h77p-7f34-7fqv https://cve.radiocsirt.org/vuln/gsd-2021-24826 gsd-2021-24826 https://cve.radiocsirt.org/vuln/gsd-2021-24826