6 matches found
EUVD-2026-58595
The Embed Google Photos album WordPress plugin through 2.2.1 does not escape a shortcode attribute value before outputting it inside an HTML attribute, allowing users with the Contributor role or above to inject arbitrary JavaScript that executes in the browser of any user, including...
CVE-2026-14290
The Embed Google Photos album WordPress plugin through 2.2.1 does not escape a shortcode attribute value before outputting it inside an HTML attribute, allowing users with the Contributor role or above to inject arbitrary JavaScript that executes in the browser of any user, including...
CVE-2026-14290
The CVE concerns the WordPress plugin Embed Google Photos album (up to version 2.2.1). Affected functionality is a shortcode attribute value that is not escaped before being output inside an HTML attribute, enabling a stored XSS condition. This permits users with the Contributor role or higher to...
EUVD-2024-30561
Malicious code in bioql PyPI...
