Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:39:13 +0000 cnvd-2022-67603 https://cve.radiocsirt.org/vuln/cnvd-2022-67603 cnvd-2022-67603 https://cve.radiocsirt.org/vuln/cnvd-2022-67603 EUVD-2026-286106 https://cve.radiocsirt.org/vuln/euvd-2026-286106 EUVD-2026-286106 https://cve.radiocsirt.org/vuln/euvd-2026-286106 fkie_cve-2022-0889 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0889 <p>The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the ~/includes/ajax/controllers/uploads.php file which can be used by unauthenticated attackers to add malicious web scripts to vulnerable WordPress sites, in versions up to and including 3.3.12.</p> <p>The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the ~/includes/ajax/controllers/uploads.php file which can be used by unauthenticated attackers to add malicious web scripts to vulnerable WordPress sites, in versions up to and including 3.3.12.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0889 GHSA-fvgm-c3gh-jgmj https://cve.radiocsirt.org/vuln/ghsa-fvgm-c3gh-jgmj <p>The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the ~/includes/ajax/controllers/uploads.php file which can be used by unauthenticated attackers to add malicious web scripts to vulnerable WordPress sites, in versions up to and including 3.3.12.</p> <p>The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the ~/includes/ajax/controllers/uploads.php file which can be used by unauthenticated attackers to add malicious web scripts to vulnerable WordPress sites, in versions up to and including 3.3.12.</p> https://cve.radiocsirt.org/vuln/ghsa-fvgm-c3gh-jgmj gsd-2022-0889 https://cve.radiocsirt.org/vuln/gsd-2022-0889 gsd-2022-0889 https://cve.radiocsirt.org/vuln/gsd-2022-0889