https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:08:30 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-55704 cnvd-2022-55704 https://cve.radiocsirt.org/vuln/cnvd-2022-55704 https://cve.radiocsirt.org/vuln/euvd-2026-11930 EUVD-2026-11930 https://cve.radiocsirt.org/vuln/euvd-2026-11930 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1756 <p>The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER[&#39;REQUEST_URI&#39;] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.</p> <p>The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER[&#39;REQUEST_URI&#39;] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1756 https://cve.radiocsirt.org/vuln/ghsa-mg6c-vwvq-75r2 <p>The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER[&#39;REQUEST_URI&#39;] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.</p> <p>The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER[&#39;REQUEST_URI&#39;] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.</p> https://cve.radiocsirt.org/vuln/ghsa-mg6c-vwvq-75r2 https://cve.radiocsirt.org/vuln/gsd-2022-1756 gsd-2022-1756 https://cve.radiocsirt.org/vuln/gsd-2022-1756 https://cve.radiocsirt.org/vuln/jvndb-2022-000057 <p>WordPress Plugin &#34;Newsletter&#34; provided by Stefano Lissa &amp; The Newsletter Team contains a cross-site scripting vulnerability (CWE-79). Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>WordPress Plugin &#34;Newsletter&#34; provided by Stefano Lissa &amp; The Newsletter Team contains a cross-site scripting vulnerability (CWE-79). Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-000057