https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 04:24:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-316184 EUVD-2026-316184 https://cve.radiocsirt.org/vuln/euvd-2026-316184 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28560 <p>wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_encode without the JSON_HEX_TAG flag. Attackers set a forum slug containing a closing script tag or unescaped single quote to break out of the JavaScript string context and execute arbitrary script in all visitors&#39; browsers.</p> <p>wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_encode without the JSON_HEX_TAG flag. Attackers set a forum slug containing a closing script tag or unescaped single quote to break out of the JavaScript string context and execute arbitrary script in all visitors&#39; browsers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28560 https://cve.radiocsirt.org/vuln/ghsa-qv3m-qhpr-9vhh <p>wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_encode without the JSON_HEX_TAG flag. Attackers set a forum slug containing a closing script tag or unescaped single quote to break out of the JavaScript string context and execute arbitrary script in all visitors&#39; browsers.</p> <p>wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_encode without the JSON_HEX_TAG flag. Attackers set a forum slug containing a closing script tag or unescaped single quote to break out of the JavaScript string context and execute arbitrary script in all visitors&#39; browsers.</p> https://cve.radiocsirt.org/vuln/ghsa-qv3m-qhpr-9vhh