https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:15:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-198729 EUVD-2026-198729 https://cve.radiocsirt.org/vuln/euvd-2026-198729 https://cve.radiocsirt.org/vuln/fkie_cve-2024-0561 <p>The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-0561 https://cve.radiocsirt.org/vuln/ghsa-hv62-rcrq-hx82 <p>The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/ghsa-hv62-rcrq-hx82 https://cve.radiocsirt.org/vuln/gsd-2024-0561 gsd-2024-0561 https://cve.radiocsirt.org/vuln/gsd-2024-0561