CVE-2026-48591

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...

CVE-2024-3901

The Genesis Blocks WordPress plugin versions 3.1.3 and earlier is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the plugin's failure to properly escape attributes provided to certain custom blocks. This allows users with permissions to write posts, such as those with...