https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:16:00 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-2696 <p>The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-2696 https://vulnerability.circl.lu/vuln/ghsa-4mhc-xx89-95pf <p>The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> <p>The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)</p> https://vulnerability.circl.lu/vuln/ghsa-4mhc-xx89-95pf https://vulnerability.circl.lu/vuln/gsd-2024-2696 gsd-2024-2696 https://vulnerability.circl.lu/vuln/gsd-2024-2696