https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:31:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245144 EUVD-2026-245144 https://cve.radiocsirt.org/vuln/euvd-2026-245144 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4955 <p>The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.</p> <p>The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-4955 https://cve.radiocsirt.org/vuln/ghsa-23mx-m43g-r4fh <p>The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.</p> <p>The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-23mx-m43g-r4fh