Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:48:36 +0000 CVE-2025-15678 — Nexter Blocks < 5.0.2 - Author+ Stored XSS via SVG Upload https://cve.radiocsirt.org/vuln/cve-2025-15678 <p><strong>Affected:</strong> Unknown Nexter Blocks</p> <p>The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize uploaded SVG files and allows SVG uploads for any user able to upload files (Author by default), allowing them to upload a file containing malicious JavaScript that executes when the file is accessed, leading to Stored Cross-Site Scripting.</p> <p><strong>Affected:</strong> Unknown Nexter Blocks</p> <p>The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize uploaded SVG files and allows SVG uploads for any user able to upload files (Author by default), allowing them to upload a file containing malicious JavaScript that executes when the file is accessed, leading to Stored Cross-Site Scripting.</p> https://cve.radiocsirt.org/vuln/cve-2025-15678