Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:26:57 +0000 EUVD-2026-282481 https://cve.radiocsirt.org/vuln/euvd-2026-282481 EUVD-2026-282481 https://cve.radiocsirt.org/vuln/euvd-2026-282481 fkie_cve-2024-1128 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1128 <p>The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.6.0. This is due to insufficient sanitization of HTML input in the Q&amp;A functionality. This makes it possible for authenticated attackers, with Student access and above, to inject arbitrary HTML onto a site, though it does not allow Cross-Site Scripting</p> <p>The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.6.0. This is due to insufficient sanitization of HTML input in the Q&amp;A functionality. This makes it possible for authenticated attackers, with Student access and above, to inject arbitrary HTML onto a site, though it does not allow Cross-Site Scripting</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1128 GHSA-w4c6-9hpf-wrhm https://cve.radiocsirt.org/vuln/ghsa-w4c6-9hpf-wrhm <p>The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.6.0. This is due to insufficient sanitization of HTML input in the Q&amp;A functionality. This makes it possible for authenticated attackers, with Student access and above, to inject arbitrary HTML onto a site, though it does not allow Cross-Site Scripting</p> <p>The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.6.0. This is due to insufficient sanitization of HTML input in the Q&amp;A functionality. This makes it possible for authenticated attackers, with Student access and above, to inject arbitrary HTML onto a site, though it does not allow Cross-Site Scripting</p> https://cve.radiocsirt.org/vuln/ghsa-w4c6-9hpf-wrhm gsd-2024-1128 https://cve.radiocsirt.org/vuln/gsd-2024-1128 gsd-2024-1128 https://cve.radiocsirt.org/vuln/gsd-2024-1128