Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:37:09 +0000 CVE-2025-4955 — tarteaucitron.io < 1.9.5 - Contributor+ Stored XSS https://cve.radiocsirt.org/vuln/cve-2025-4955 <p><strong>Affected:</strong> Unknown tarteaucitron.io</p> <p>The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.</p> <p><strong>Affected:</strong> Unknown tarteaucitron.io</p> <p>The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.</p> https://cve.radiocsirt.org/vuln/cve-2025-4955