https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:07:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-224049 EUVD-2026-224049 https://cve.radiocsirt.org/vuln/euvd-2026-224049 https://cve.radiocsirt.org/vuln/fkie_cve-2024-0559 <p>The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-0559 https://cve.radiocsirt.org/vuln/ghsa-gq6r-j83x-w77v <p>The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/ghsa-gq6r-j83x-w77v https://cve.radiocsirt.org/vuln/gsd-2024-0559 gsd-2024-0559 https://cve.radiocsirt.org/vuln/gsd-2024-0559