https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T05:28:32.694140+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2013-5916 fkie_cve-2013-5916 2026-10-09T05:28:32.746199+00:00

Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.

 https://vulnerability.circl.lu/vuln/ghsa-c6w5-7fpv-gf86 GHSA-c6w5-7fpv-gf86 2026-10-09T05:28:32.746315+00:00

Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.

 https://vulnerability.circl.lu/vuln/gsd-2013-5916 gsd-2013-5916 2026-10-09T05:28:32.746342+00:00 gsd-2013-5916 https://vulnerability.circl.lu/vuln/var-201405-0105 VAR-201405-0105 2026-10-09T05:28:32.746360+00:00

Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING. The Bradesco Gateway plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blogging websites on PHP and MySQL servers. Bradesco Gateway is one of the payment gateway plugins