https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 05:02:47 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-29860 cnvd-2021-29860 https://cve.radiocsirt.org/vuln/cnvd-2021-29860 https://cve.radiocsirt.org/vuln/euvd-2026-23629 EUVD-2026-23629 https://cve.radiocsirt.org/vuln/euvd-2026-23629 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24218 <p>The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.</p> <p>The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24218 https://cve.radiocsirt.org/vuln/ghsa-28p8-w9v3-x57w <p>The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.</p> <p>The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.</p> https://cve.radiocsirt.org/vuln/ghsa-28p8-w9v3-x57w https://cve.radiocsirt.org/vuln/gsd-2021-24218 gsd-2021-24218 https://cve.radiocsirt.org/vuln/gsd-2021-24218