https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:22:04 +0000 https://vulnerability.circl.lu/vuln/cve-2026-91073 <p><strong>Affected:</strong> Unknown Subscribe Forms</p> <p>The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor who views a page embedding the form, including logged-out visitors and administrators.</p> <p><strong>Affected:</strong> Unknown Subscribe Forms</p> <p>The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor who views a page embedding the form, including logged-out visitors and administrators.</p> https://vulnerability.circl.lu/vuln/cve-2026-91073