https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:33:05 +0000 https://cve.radiocsirt.org/vuln/cve-2026-14292 <p><strong>Affected:</strong> Unknown Download Manager</p> <p>The Download Manager WordPress plugin before 3.3.66 does not properly escape a package&#39;s title before outputting it in the front-end package templates, allowing users with the Author role or above to store a title that results in arbitrary JavaScript execution in the browser of any user, including unauthenticated visitors, who views a page displaying the package.</p> <p><strong>Affected:</strong> Unknown Download Manager</p> <p>The Download Manager WordPress plugin before 3.3.66 does not properly escape a package&#39;s title before outputting it in the front-end package templates, allowing users with the Author role or above to store a title that results in arbitrary JavaScript execution in the browser of any user, including unauthenticated visitors, who views a page displaying the package.</p> https://cve.radiocsirt.org/vuln/cve-2026-14292