Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:14:12 +0000 CVE-2022-1995 — miniOrange's Malware Scanner < 4.5.2 - Admin+ Stored Cross-Site Scripting https://vulnerability.circl.lu/vuln/cve-2022-1995 <p><strong>Affected:</strong> Unknown Malware Scanner</p> <p>The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)</p> <p><strong>Affected:</strong> Unknown Malware Scanner</p> <p>The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)</p> https://vulnerability.circl.lu/vuln/cve-2022-1995