https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:22:22 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2025-28253 <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.</p> <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-28253 https://vulnerability.circl.lu/vuln/ghsa-jfqh-c88v-ccr7 <p>Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Dashboard v5.3.4 exists in class/class-mainwp-post-handler.php, where unsanitized user input from $_POST[&#39;sites&#39;], $_POST[&#39;clients&#39;], and $_POST[&#39;search&#39;] is passed into the MainWP_User::render_table function. Despite using sanitize_text_field and wp_unslash, the values are not adequately protected against HTML or script injection. This flaw could allow an attacker to inject malicious scripts.</p> <p>Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Dashboard v5.3.4 exists in class/class-mainwp-post-handler.php, where unsanitized user input from $_POST[&#39;sites&#39;], $_POST[&#39;clients&#39;], and $_POST[&#39;search&#39;] is passed into the MainWP_User::render_table function. Despite using sanitize_text_field and wp_unslash, the values are not adequately protected against HTML or script injection. This flaw could allow an attacker to inject malicious scripts.</p> https://vulnerability.circl.lu/vuln/ghsa-jfqh-c88v-ccr7