https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:50:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-23832 EUVD-2026-23832 https://cve.radiocsirt.org/vuln/euvd-2026-23832 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24443 <p>The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership WordPress plugin before 1.0.7 does not properly sanitise its Biography field, allowing any authenticated user to set Cross-Site Scripting payloads in it, which will be executed when viewing the affected user profile. This could allow a low privilege user to gain unauthorised access to the admin side of the blog by targeting an admin, inducing them to view their profile with a malicious payload adding a rogue account for example.</p> <p>The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership WordPress plugin before 1.0.7 does not properly sanitise its Biography field, allowing any authenticated user to set Cross-Site Scripting payloads in it, which will be executed when viewing the affected user profile. This could allow a low privilege user to gain unauthorised access to the admin side of the blog by targeting an admin, inducing them to view their profile with a malicious payload adding a rogue account for example.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24443 https://cve.radiocsirt.org/vuln/ghsa-w5vh-q269-m424 <p>The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership WordPress plugin before 1.0.7 does not properly sanitise its Biography field, allowing any authenticated user to set Cross-Site Scripting payloads in it, which will be executed when viewing the affected user profile. This could allow a low privilege user to gain unauthorised access to the admin side of the blog by targeting an admin, inducing them to view their profile with a malicious payload adding a rogue account for example.</p> <p>The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership WordPress plugin before 1.0.7 does not properly sanitise its Biography field, allowing any authenticated user to set Cross-Site Scripting payloads in it, which will be executed when viewing the affected user profile. This could allow a low privilege user to gain unauthorised access to the admin side of the blog by targeting an admin, inducing them to view their profile with a malicious payload adding a rogue account for example.</p> https://cve.radiocsirt.org/vuln/ghsa-w5vh-q269-m424 https://cve.radiocsirt.org/vuln/gsd-2021-24443 gsd-2021-24443 https://cve.radiocsirt.org/vuln/gsd-2021-24443