https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 17:30:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-283614 EUVD-2026-283614 https://cve.radiocsirt.org/vuln/euvd-2026-283614 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4069 <p>The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;naam&#39; parameter in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the alfie_option_page() function combined with insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject malicious web scripts that will be stored in the plugin&#39;s database and execute whenever a user accesses the page displaying the injected data, granted they can trick a site administrator into performing an action such as clicking on a link.</p> <p>The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;naam&#39; parameter in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the alfie_option_page() function combined with insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject malicious web scripts that will be stored in the plugin&#39;s database and execute whenever a user accesses the page displaying the injected data, granted they can trick a site administrator into performing an action such as clicking on a link.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4069 https://cve.radiocsirt.org/vuln/ghsa-pmq6-5285-2f6f <p>The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;naam&#39; parameter in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the alfie_option_page() function combined with insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject malicious web scripts that will be stored in the plugin&#39;s database and execute whenever a user accesses the page displaying the injected data, granted they can trick a site administrator into performing an action such as clicking on a link.</p> <p>The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;naam&#39; parameter in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the alfie_option_page() function combined with insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject malicious web scripts that will be stored in the plugin&#39;s database and execute whenever a user accesses the page displaying the injected data, granted they can trick a site administrator into performing an action such as clicking on a link.</p> https://cve.radiocsirt.org/vuln/ghsa-pmq6-5285-2f6f