https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:31:39 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-70766 cnvd-2022-70766 https://cve.radiocsirt.org/vuln/cnvd-2022-70766 https://cve.radiocsirt.org/vuln/euvd-2026-285288 EUVD-2026-285288 https://cve.radiocsirt.org/vuln/euvd-2026-285288 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0834 <p>The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the lastName parameter found in the ~/src/Application/Controller/User/Customer/AddCustomerController.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user accesses the booking calendar with the date the attacker has injected the malicious payload into. This affects versions up to and including 1.0.46.</p> <p>The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the lastName parameter found in the ~/src/Application/Controller/User/Customer/AddCustomerController.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user accesses the booking calendar with the date the attacker has injected the malicious payload into. This affects versions up to and including 1.0.46.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0834 https://cve.radiocsirt.org/vuln/ghsa-qcv2-jjq2-95wj <p>The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the lastName parameter found in the ~/src/Application/Controller/User/Customer/AddCustomerController.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user accesses the booking calendar with the date the attacker has injected the malicious payload into. This affects versions up to and including 1.0.46.</p> <p>The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the lastName parameter found in the ~/src/Application/Controller/User/Customer/AddCustomerController.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user accesses the booking calendar with the date the attacker has injected the malicious payload into. This affects versions up to and including 1.0.46.</p> https://cve.radiocsirt.org/vuln/ghsa-qcv2-jjq2-95wj https://cve.radiocsirt.org/vuln/gsd-2022-0834 gsd-2022-0834 https://cve.radiocsirt.org/vuln/gsd-2022-0834