https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:55:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-354408 EUVD-2026-354408 https://cve.radiocsirt.org/vuln/euvd-2026-354408 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18402 <p>The SureDash – Community, Courses &amp; Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via &#39;draweropenverposition&#39; Block/Shortcode Attribute in all versions up to, and including, 1.10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is stored inside the block-delimiter HTML comment&#39;s JSON, which wp_kses_post does not neutralize on save, and is only interpolated into the rendered style attribute at display time without esc_attr() escaping, allowing a double-quote to break out of the attribute and introduce arbitrary HTML event handlers.</p> <p>The SureDash – Community, Courses &amp; Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via &#39;draweropenverposition&#39; Block/Shortcode Attribute in all versions up to, and including, 1.10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is stored inside the block-delimiter HTML comment&#39;s JSON, which wp_kses_post does not neutralize on save, and is only interpolated into the rendered style attribute at display time without esc_attr() escaping, allowing a double-quote to break out of the attribute and introduce arbitrary HTML event handlers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18402 https://cve.radiocsirt.org/vuln/ghsa-7f7r-rggw-cgcr <p>The SureDash – Community, Courses &amp; Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via &#39;draweropenverposition&#39; Block/Shortcode Attribute in all versions up to, and including, 1.10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is stored inside the block-delimiter HTML comment&#39;s JSON, which wp_kses_post does not neutralize on save, and is only interpolated into the rendered style attribute at display time without esc_attr() escaping, allowing a double-quote to break out of the attribute and introduce arbitrary HTML event handlers.</p> <p>The SureDash – Community, Courses &amp; Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via &#39;draweropenverposition&#39; Block/Shortcode Attribute in all versions up to, and including, 1.10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is stored inside the block-delimiter HTML comment&#39;s JSON, which wp_kses_post does not neutralize on save, and is only interpolated into the rendered style attribute at display time without esc_attr() escaping, allowing a double-quote to break out of the attribute and introduce arbitrary HTML event handlers.</p> https://cve.radiocsirt.org/vuln/ghsa-7f7r-rggw-cgcr