https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T02:09:34.008967+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111979 fkie_cve-2026-111979 2026-10-31T02:09:34.028705+00:00

The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template settings before outputting it inside an HTML attribute, allowing users with a custom form-editing GiveWP WordPress plugin before 4.19.0.1 role to inject arbitrary web scripts that execute in the browser of any visitor or administrator who opens the affected donation form.

 https://db.gcve.eu/vuln/ghsa-xm8r-m35h-qq8p GHSA-xm8r-m35h-qq8p 2026-10-31T02:09:34.028770+00:00

The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template settings before outputting it inside an HTML attribute, allowing users with a custom form-editing GiveWP WordPress plugin before 4.19.0.1 role to inject arbitrary web scripts that execute in the browser of any visitor or administrator who opens the affected donation form.