https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 07:41:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-282224 EUVD-2026-282224 https://cve.radiocsirt.org/vuln/euvd-2026-282224 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2406 <p>The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square &amp; Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the &#39;email&#39; parameter in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with the edit_posts capability, such as contributors and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square &amp; Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the &#39;email&#39; parameter in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with the edit_posts capability, such as contributors and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2406 https://cve.radiocsirt.org/vuln/ghsa-g4r7-hv6x-5c72 <p>The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square &amp; Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the &#39;email&#39; parameter in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with the edit_posts capability, such as contributors and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square &amp; Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the &#39;email&#39; parameter in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with the edit_posts capability, such as contributors and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/ghsa-g4r7-hv6x-5c72 https://cve.radiocsirt.org/vuln/gsd-2023-2406 gsd-2023-2406 https://cve.radiocsirt.org/vuln/gsd-2023-2406