https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:16:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-244032 EUVD-2026-244032 https://cve.radiocsirt.org/vuln/euvd-2026-244032 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0389 <p>The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0389 https://cve.radiocsirt.org/vuln/ghsa-r34p-xvw4-c7qj <p>The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/ghsa-r34p-xvw4-c7qj https://cve.radiocsirt.org/vuln/gsd-2023-0389 gsd-2023-0389 https://cve.radiocsirt.org/vuln/gsd-2023-0389