https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 09:37:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245089 EUVD-2026-245089 https://cve.radiocsirt.org/vuln/euvd-2026-245089 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6485 <p>The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins</p> <p>The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6485 https://cve.radiocsirt.org/vuln/ghsa-p5mw-mg37-2vrh <p>The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins</p> <p>The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins</p> https://cve.radiocsirt.org/vuln/ghsa-p5mw-mg37-2vrh https://cve.radiocsirt.org/vuln/gsd-2023-6485 gsd-2023-6485 https://cve.radiocsirt.org/vuln/gsd-2023-6485