https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T15:22:22.463987+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2025-28253 fkie_cve-2025-28253 2026-10-01T15:22:22.851943+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

 https://vulnerability.circl.lu/vuln/ghsa-jfqh-c88v-ccr7 GHSA-jfqh-c88v-ccr7 2026-10-01T15:22:22.852034+00:00

Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Dashboard v5.3.4 exists in class/class-mainwp-post-handler.php, where unsanitized user input from $_POST['sites'], $_POST['clients'], and $_POST['search'] is passed into the MainWP_User::render_table function. Despite using sanitize_text_field and wp_unslash, the values are not adequately protected against HTML or script injection. This flaw could allow an attacker to inject malicious scripts.