https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:34:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-350800 EUVD-2026-350800 https://cve.radiocsirt.org/vuln/euvd-2026-350800 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16032 <p>The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it and rendering it in an administrative dashboard, allowing unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the affected dashboard page.</p> <p>The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it and rendering it in an administrative dashboard, allowing unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the affected dashboard page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16032 https://cve.radiocsirt.org/vuln/ghsa-x8x4-c789-5r5g <p>The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it and rendering it in an administrative dashboard, allowing unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the affected dashboard page.</p> <p>The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it and rendering it in an administrative dashboard, allowing unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the affected dashboard page.</p> https://cve.radiocsirt.org/vuln/ghsa-x8x4-c789-5r5g