https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 04:25:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-385322 EUVD-2026-385322 https://cve.radiocsirt.org/vuln/euvd-2026-385322 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107323 <p>The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing the gallery, including administrators.</p> <p>The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing the gallery, including administrators.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-107323 https://cve.radiocsirt.org/vuln/ghsa-pccf-qp9v-4p26 <p>The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing the gallery, including administrators.</p> <p>The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing the gallery, including administrators.</p> https://cve.radiocsirt.org/vuln/ghsa-pccf-qp9v-4p26