Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:52:04 +0000 EUVD-2026-282179 https://cve.radiocsirt.org/vuln/euvd-2026-282179 EUVD-2026-282179 https://cve.radiocsirt.org/vuln/euvd-2026-282179 fkie_cve-2024-9416 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9416 <p>The Modula Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#39;s bundled FancyBox JavaScript library (versions &lt;= 5.0.36) due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The Modula Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#39;s bundled FancyBox JavaScript library (versions &lt;= 5.0.36) due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-9416 GHSA-4m88-v589-v3w7 https://cve.radiocsirt.org/vuln/ghsa-4m88-v589-v3w7 <p>The Modula Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#39;s bundled FancyBox JavaScript library (versions &lt;= 5.0.36) due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The Modula Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#39;s bundled FancyBox JavaScript library (versions &lt;= 5.0.36) due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/ghsa-4m88-v589-v3w7