https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 03:28:27 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-69137 cnvd-2022-69137 https://cve.radiocsirt.org/vuln/cnvd-2022-69137 https://cve.radiocsirt.org/vuln/euvd-2026-23971 EUVD-2026-23971 https://cve.radiocsirt.org/vuln/euvd-2026-23971 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24494 <p>The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email&#39;s id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.</p> <p>The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email&#39;s id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24494 https://cve.radiocsirt.org/vuln/ghsa-2f8j-q25r-f5qx <p>The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email&#39;s id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.</p> <p>The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email&#39;s id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.</p> https://cve.radiocsirt.org/vuln/ghsa-2f8j-q25r-f5qx https://cve.radiocsirt.org/vuln/gsd-2021-24494 gsd-2021-24494 https://cve.radiocsirt.org/vuln/gsd-2021-24494