https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:16:27 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-4086 <p>The WP Random Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;cat&#39;, &#39;nocat&#39;, and &#39;text&#39; shortcode attributes of the &#39;wp_random_button&#39; shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes. Specifically, the random_button_html() function directly concatenates the &#39;cat&#39; and &#39;nocat&#39; parameters into HTML data-attributes without esc_attr(), and the &#39;text&#39; parameter into HTML content without esc_html(). This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The WP Random Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;cat&#39;, &#39;nocat&#39;, and &#39;text&#39; shortcode attributes of the &#39;wp_random_button&#39; shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes. Specifically, the random_button_html() function directly concatenates the &#39;cat&#39; and &#39;nocat&#39; parameters into HTML data-attributes without esc_attr(), and the &#39;text&#39; parameter into HTML content without esc_html(). This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-4086 https://vulnerability.circl.lu/vuln/ghsa-x5f6-m38m-6rp5 <p>The WP Random Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;cat&#39;, &#39;nocat&#39;, and &#39;text&#39; shortcode attributes of the &#39;wp_random_button&#39; shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes. Specifically, the random_button_html() function directly concatenates the &#39;cat&#39; and &#39;nocat&#39; parameters into HTML data-attributes without esc_attr(), and the &#39;text&#39; parameter into HTML content without esc_html(). This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The WP Random Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#39;cat&#39;, &#39;nocat&#39;, and &#39;text&#39; shortcode attributes of the &#39;wp_random_button&#39; shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes. Specifically, the random_button_html() function directly concatenates the &#39;cat&#39; and &#39;nocat&#39; parameters into HTML data-attributes without esc_attr(), and the &#39;text&#39; parameter into HTML content without esc_html(). This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://vulnerability.circl.lu/vuln/ghsa-x5f6-m38m-6rp5