https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:26:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-12453 cnvd-2025-12453 https://cve.radiocsirt.org/vuln/cnvd-2025-12453 https://cve.radiocsirt.org/vuln/euvd-2026-242805 EUVD-2026-242805 https://cve.radiocsirt.org/vuln/euvd-2026-242805 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3662 <p>The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries&#39; caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated it to an Unauthenticated Stored XSS</p> <p>The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries&#39; caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated it to an Unauthenticated Stored XSS</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3662 https://cve.radiocsirt.org/vuln/ghsa-3q79-wmhj-39pr <p>The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries&#39; caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated it to an Unauthenticated Stored XSS</p> <p>The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries&#39; caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated it to an Unauthenticated Stored XSS</p> https://cve.radiocsirt.org/vuln/ghsa-3q79-wmhj-39pr