https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 08:31:59 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-96227 <p>The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site&#39;s origin when it is opened (Stored XSS).</p> <p>The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site&#39;s origin when it is opened (Stored XSS).</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-96227 https://vulnerability.circl.lu/vuln/ghsa-6pfh-rcm2-3cv3 <p>The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site&#39;s origin when it is opened (Stored XSS).</p> <p>The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site&#39;s origin when it is opened (Stored XSS).</p> https://vulnerability.circl.lu/vuln/ghsa-6pfh-rcm2-3cv3