https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:21:24 +0000 https://cve.radiocsirt.org/vuln/cve-2021-24443 <p><strong>Affected:</strong> Unknown Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership Plugin for WordPress</p> <p>The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership WordPress plugin before 1.0.7 does not properly sanitise its Biography field, allowing any authenticated user to set Cross-Site Scripting payloads in it, which will be executed when viewing the affected user profile. This could allow a low privilege user to gain unauthorised access to the admin side of the blog by targeting an admin, inducing them to view their profile with a malicious payload adding a rogue account for example.</p> <p><strong>Affected:</strong> Unknown Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership Plugin for WordPress</p> <p>The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership WordPress plugin before 1.0.7 does not properly sanitise its Biography field, allowing any authenticated user to set Cross-Site Scripting payloads in it, which will be executed when viewing the affected user profile. This could allow a low privilege user to gain unauthorised access to the admin side of the blog by targeting an admin, inducing them to view their profile with a malicious payload adding a rogue account for example.</p> https://cve.radiocsirt.org/vuln/cve-2021-24443