https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:08:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-289336 EUVD-2026-289336 https://cve.radiocsirt.org/vuln/euvd-2026-289336 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4599 <p>The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;eeb_mailto&#39; shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. A partial patch was issued in version 2.1.8. The vulnerability was fully patched in 2.1.9.</p> <p>The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;eeb_mailto&#39; shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. A partial patch was issued in version 2.1.8. The vulnerability was fully patched in 2.1.9.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4599 https://cve.radiocsirt.org/vuln/ghsa-76p2-85pf-cqf5 <p>The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;eeb_mailto&#39; shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;eeb_mailto&#39; shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/ghsa-76p2-85pf-cqf5 https://cve.radiocsirt.org/vuln/gsd-2023-4599 gsd-2023-4599 https://cve.radiocsirt.org/vuln/gsd-2023-4599