https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 09:36:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351237 EUVD-2026-351237 https://cve.radiocsirt.org/vuln/euvd-2026-351237 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16559 <p>The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site&#39;s origin when the file is viewed.</p> <p>The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site&#39;s origin when the file is viewed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16559 https://cve.radiocsirt.org/vuln/ghsa-qgw2-v7vq-9g5r <p>The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site&#39;s origin when the file is viewed.</p> <p>The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site&#39;s origin when the file is viewed.</p> https://cve.radiocsirt.org/vuln/ghsa-qgw2-v7vq-9g5r