https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:42:45 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-31557 cnvd-2022-31557 https://cve.radiocsirt.org/vuln/cnvd-2022-31557 https://cve.radiocsirt.org/vuln/euvd-2026-24443 EUVD-2026-24443 https://cve.radiocsirt.org/vuln/euvd-2026-24443 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25060 <p>The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting issues</p> <p>The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting issues</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25060 https://cve.radiocsirt.org/vuln/ghsa-hj2f-j483-4hvv <p>The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting issues</p> <p>The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting issues</p> https://cve.radiocsirt.org/vuln/ghsa-hj2f-j483-4hvv https://cve.radiocsirt.org/vuln/gsd-2021-25060 gsd-2021-25060 https://cve.radiocsirt.org/vuln/gsd-2021-25060