https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:07:13 +0000 https://cve.radiocsirt.org/vuln/cve-2025-15665 <p><strong>Affected:</strong> Unknown Ultimate Before After Image Slider &amp; Gallery</p> <p>The Ultimate Before After Image Slider &amp; Gallery WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget&#39;s shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget.</p> <p><strong>Affected:</strong> Unknown Ultimate Before After Image Slider &amp; Gallery</p> <p>The Ultimate Before After Image Slider &amp; Gallery WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget&#39;s shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget.</p> https://cve.radiocsirt.org/vuln/cve-2025-15665