https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:51:33 +0000 https://vulnerability.circl.lu/vuln/cve-2026-14835 <p><strong>Affected:</strong> Unknown SOGO Add Script to Individual Pages Header Footer</p> <p>The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfiltered_html capability, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any administrator who reviews the post and of any visitor once the post is published.</p> <p><strong>Affected:</strong> Unknown SOGO Add Script to Individual Pages Header Footer</p> <p>The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfiltered_html capability, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any administrator who reviews the post and of any visitor once the post is published.</p> https://vulnerability.circl.lu/vuln/cve-2026-14835