https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:22:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336535 EUVD-2026-336535 https://cve.radiocsirt.org/vuln/euvd-2026-336535 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22209 <p>wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags. Attackers with admin access can inject payloads like &lt;/style&gt;&lt;script&gt;alert(1)&lt;/script&gt; in the custom CSS setting to execute arbitrary JavaScript in user browsers.</p> <p>wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags. Attackers with admin access can inject payloads like &lt;/style&gt;&lt;script&gt;alert(1)&lt;/script&gt; in the custom CSS setting to execute arbitrary JavaScript in user browsers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22209 https://cve.radiocsirt.org/vuln/ghsa-hrwg-p9c4-49wp <p>wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags. Attackers with admin access can inject payloads like &lt;/style&gt;&lt;script&gt;alert(1)&lt;/script&gt; in the custom CSS setting to execute arbitrary JavaScript in user browsers.</p> <p>wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags. Attackers with admin access can inject payloads like &lt;/style&gt;&lt;script&gt;alert(1)&lt;/script&gt; in the custom CSS setting to execute arbitrary JavaScript in user browsers.</p> https://cve.radiocsirt.org/vuln/ghsa-hrwg-p9c4-49wp