https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:48:34 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6305 <p>Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111.</p> <p>Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6305 https://cve.radiocsirt.org/vuln/ghsa-ffj2-4hgp-mvgh <p>WordPress Core is vulnerable to Stored Cross-Site Scripting via the Template Part Block in various versions up to 6.5.5 due to insufficient input sanitization and output escaping on the &#39;tagName&#39; attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>WordPress Core is vulnerable to Stored Cross-Site Scripting via the Template Part Block in various versions up to 6.5.5 due to insufficient input sanitization and output escaping on the &#39;tagName&#39; attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/ghsa-ffj2-4hgp-mvgh https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1454 <p>Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder Dateien zu manipulieren.</p> <p>Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1454