https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:14:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-361753 EUVD-2026-361753 https://cve.radiocsirt.org/vuln/euvd-2026-361753 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78364 <p>The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admin.</p> <p>The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admin.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78364 https://cve.radiocsirt.org/vuln/ghsa-88rf-74wh-96q8 <p>The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admin.</p> <p>The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admin.</p> https://cve.radiocsirt.org/vuln/ghsa-88rf-74wh-96q8