https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:07:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-260781 EUVD-2026-260781 https://cve.radiocsirt.org/vuln/euvd-2026-260781 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4002 <p>The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-4002 https://cve.radiocsirt.org/vuln/ghsa-gpv2-32pf-74f2 <p>The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/ghsa-gpv2-32pf-74f2 https://cve.radiocsirt.org/vuln/gsd-2024-4002 gsd-2024-4002 https://cve.radiocsirt.org/vuln/gsd-2024-4002