https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 08:21:50 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-102811 cnvd-2021-102811 https://cve.radiocsirt.org/vuln/cnvd-2021-102811 https://cve.radiocsirt.org/vuln/euvd-2026-217575 EUVD-2026-217575 https://cve.radiocsirt.org/vuln/euvd-2026-217575 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42365 <p>The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the ~/admin/tables/admin-structure-table.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.13. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.</p> <p>The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the ~/admin/tables/admin-structure-table.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.13. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42365 https://cve.radiocsirt.org/vuln/ghsa-8h56-96mw-r96r <p>The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the ~/admin/tables/admin-structure-table.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.13. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.</p> <p>The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the ~/admin/tables/admin-structure-table.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.13. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.</p> https://cve.radiocsirt.org/vuln/ghsa-8h56-96mw-r96r https://cve.radiocsirt.org/vuln/gsd-2021-42365 gsd-2021-42365 https://cve.radiocsirt.org/vuln/gsd-2021-42365