https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 21:14:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-83666 cnvd-2021-83666 https://cve.radiocsirt.org/vuln/cnvd-2021-83666 https://cve.radiocsirt.org/vuln/euvd-2026-217708 EUVD-2026-217708 https://cve.radiocsirt.org/vuln/euvd-2026-217708 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39348 <p>The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the ~/inc/admin/views/backend-user-profile.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.1.3.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Please note that this is seperate from CVE-2021-24702.</p> <p>The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the ~/inc/admin/views/backend-user-profile.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.1.3.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Please note that this is seperate from CVE-2021-24702.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39348 https://cve.radiocsirt.org/vuln/ghsa-8wvx-x66h-gvp7 <p>The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the ~/inc/admin/views/backend-user-profile.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.1.3.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Please note that this is seperate from CVE-2021-24702.</p> <p>The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the ~/inc/admin/views/backend-user-profile.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.1.3.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Please note that this is seperate from CVE-2021-24702.</p> https://cve.radiocsirt.org/vuln/ghsa-8wvx-x66h-gvp7 https://cve.radiocsirt.org/vuln/gsd-2021-39348 gsd-2021-39348 https://cve.radiocsirt.org/vuln/gsd-2021-39348