https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T13:15:57.703448+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-14835 CVE-2026-14835 — SOGO Add Script to Individual Pages Header Footer <= 3.9 - Contributor+ Stored XSS via Post Metabox 2026-09-30T13:15:57.725228+00:00

Affected: Unknown SOGO Add Script to Individual Pages Header Footer

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfiltered_html capability, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any administrator who reviews the post and of any visitor once the post is published.