CVE-2026-48591

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...

CVE-2024-3901

The Genesis Blocks WordPress plugin (versions 3.1.3 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the plugin's failure to properly escape attributes provided to some of its custom blocks . This flaw allows users with permissions to write posts, such as those...