https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:21:54 +0000 https://vulnerability.circl.lu/vuln/cve-2026-92994 <p><strong>Affected:</strong> Unknown Verge3D Publishing and E-Commerce</p> <p>The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript that executes in the browser of any user who opens it.</p> <p><strong>Affected:</strong> Unknown Verge3D Publishing and E-Commerce</p> <p>The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript that executes in the browser of any user who opens it.</p> https://vulnerability.circl.lu/vuln/cve-2026-92994