https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:54:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-224299 EUVD-2026-224299 https://cve.radiocsirt.org/vuln/euvd-2026-224299 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4551 <p>The Rich Table of Contents WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks</p> <p>The Rich Table of Contents WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4551 https://cve.radiocsirt.org/vuln/ghsa-5mv2-wc78-4c8g <p>The Rich Table of Contents WordPress plugin through 1.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.</p> <p>The Rich Table of Contents WordPress plugin through 1.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.</p> https://cve.radiocsirt.org/vuln/ghsa-5mv2-wc78-4c8g https://cve.radiocsirt.org/vuln/gsd-2022-4551 gsd-2022-4551 https://cve.radiocsirt.org/vuln/gsd-2022-4551