https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 00:25:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-24327 EUVD-2026-24327 https://cve.radiocsirt.org/vuln/euvd-2026-24327 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24911 <p>The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin &#34;Who can translate ?&#34; setting.</p> <p>The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin &#34;Who can translate ?&#34; setting.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24911 https://cve.radiocsirt.org/vuln/ghsa-p553-xq2c-fgrg <p>The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin &#34;Who can translate ?&#34; setting.</p> <p>The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin &#34;Who can translate ?&#34; setting.</p> https://cve.radiocsirt.org/vuln/ghsa-p553-xq2c-fgrg https://cve.radiocsirt.org/vuln/gsd-2021-24911 gsd-2021-24911 https://cve.radiocsirt.org/vuln/gsd-2021-24911