https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 13:32:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-241009 EUVD-2026-241009 https://cve.radiocsirt.org/vuln/euvd-2026-241009 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2413 <p>The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfiltered_html capability is disabled.</p> <p>The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfiltered_html capability is disabled.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2413 https://cve.radiocsirt.org/vuln/ghsa-9r3v-3w88-2hh3 <p>The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfiltered_html capability is disabled.</p> <p>The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfiltered_html capability is disabled.</p> https://cve.radiocsirt.org/vuln/ghsa-9r3v-3w88-2hh3 https://cve.radiocsirt.org/vuln/gsd-2022-2413 gsd-2022-2413 https://cve.radiocsirt.org/vuln/gsd-2022-2413