Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:31:54 +0000 CVE-2023-4294 — URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header https://cve.radiocsirt.org/vuln/cve-2023-4294 <p><strong>Affected:</strong> Unknown URL Shortify</p> <p>The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link.</p> <p><strong>Affected:</strong> Unknown URL Shortify</p> <p>The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link.</p> https://cve.radiocsirt.org/vuln/cve-2023-4294