Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:21:17 +0000 CVE-2026-16559 — YMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon Upload https://cve.radiocsirt.org/vuln/cve-2026-16559 <p><strong>Affected:</strong> Unknown YMC Filter</p> <p>The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site&#39;s origin when the file is viewed.</p> <p><strong>Affected:</strong> Unknown YMC Filter</p> <p>The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site&#39;s origin when the file is viewed.</p> https://cve.radiocsirt.org/vuln/cve-2026-16559