https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 15:03:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341327 EUVD-2026-341327 https://cve.radiocsirt.org/vuln/euvd-2026-341327 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14203 <p>The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes in the browser session of an administrator who views the grid.</p> <p>The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes in the browser session of an administrator who views the grid.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14203 https://cve.radiocsirt.org/vuln/ghsa-48wv-hw8m-mfc2 <p>The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes in the browser session of an administrator who views the grid.</p> <p>The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes in the browser session of an administrator who views the grid.</p> https://cve.radiocsirt.org/vuln/ghsa-48wv-hw8m-mfc2