https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:08:27 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-12522 cnvd-2025-12522 https://cve.radiocsirt.org/vuln/cnvd-2025-12522 https://cve.radiocsirt.org/vuln/euvd-2026-242806 EUVD-2026-242806 https://cve.radiocsirt.org/vuln/euvd-2026-242806 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3584 <p>The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).</p> <p>The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3584 https://cve.radiocsirt.org/vuln/ghsa-6p39-gq6w-rwhx <p>The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).</p> <p>The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).</p> https://cve.radiocsirt.org/vuln/ghsa-6p39-gq6w-rwhx