https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:23:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-224934 EUVD-2026-224934 https://cve.radiocsirt.org/vuln/euvd-2026-224934 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45429 <p>Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the &#39;capability&#39; setting privilege which is set in the product settings stores an arbitrary script in the field label, the script may be executed on the web browser of the logged-in user with the same privilege as the attacker&#39;s.</p> <p>Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the &#39;capability&#39; setting privilege which is set in the product settings stores an arbitrary script in the field label, the script may be executed on the web browser of the logged-in user with the same privilege as the attacker&#39;s.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45429 https://cve.radiocsirt.org/vuln/ghsa-h827-7423-x2vc <p>Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the &#39;capability&#39; setting privilege which is set in the product settings stores an arbitrary script in the field label, the script may be executed on the web browser of the logged-in user with the same privilege as the attacker&#39;s.</p> <p>Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the &#39;capability&#39; setting privilege which is set in the product settings stores an arbitrary script in the field label, the script may be executed on the web browser of the logged-in user with the same privilege as the attacker&#39;s.</p> https://cve.radiocsirt.org/vuln/ghsa-h827-7423-x2vc https://cve.radiocsirt.org/vuln/jvndb-2024-000093 <p>The field labels in WordPress Plugin &#34;Advanced Custom Fields&#34; provided by WP Engine contains a cross-site scripting vulnerability (CWE-79). Ryo Sotoyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>The field labels in WordPress Plugin &#34;Advanced Custom Fields&#34; provided by WP Engine contains a cross-site scripting vulnerability (CWE-79). Ryo Sotoyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000093