<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 16 Oct 2026 09:05:53 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-6026 — Slider by 10Web &lt; 1.2.56 - Editor+ Stored XSS</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2024-6026</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Slider by 10Web, 10web slider&lt;/p&gt;
&lt;p&gt;The Slider by 10Web  WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders (by default Administrator, however this can be changed via the Slider by 10Web  WordPress plugin before 1.2.56&amp;#39;s options) and the ability to add images (Editor+) to perform Stored Cross-Site Scripting attacks&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Slider by 10Web, 10web slider&lt;/p&gt;
&lt;p&gt;The Slider by 10Web  WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders (by default Administrator, however this can be changed via the Slider by 10Web  WordPress plugin before 1.2.56&amp;#39;s options) and the ability to add images (Editor+) to perform Stored Cross-Site Scripting attacks&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2024-6026</guid>
    </item>
  </channel>
</rss>
