https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:03:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-361501 EUVD-2026-361501 https://cve.radiocsirt.org/vuln/euvd-2026-361501 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3129 <p>The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `&lt;img&gt;` tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip `width` and `height` attributes from images when the &#34;Lazy Load Images&#34; and &#34;Add Missing Sizes&#34; features are enabled. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that execute whenever a user accesses an injected page.</p> <p>The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `&lt;img&gt;` tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip `width` and `height` attributes from images when the &#34;Lazy Load Images&#34; and &#34;Add Missing Sizes&#34; features are enabled. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3129 https://cve.radiocsirt.org/vuln/ghsa-g9h6-rmm3-xq5v <p>The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `&lt;img&gt;` tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip `width` and `height` attributes from images when the &#34;Lazy Load Images&#34; and &#34;Add Missing Sizes&#34; features are enabled. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that execute whenever a user accesses an injected page.</p> <p>The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `&lt;img&gt;` tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip `width` and `height` attributes from images when the &#34;Lazy Load Images&#34; and &#34;Add Missing Sizes&#34; features are enabled. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/ghsa-g9h6-rmm3-xq5v