https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T03:53:19.212637+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-107246 fkie_cve-2026-107246 2026-11-11T03:53:19.226767+00:00

The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal. This lets a non-owner subscription user redirect a privileged backend session into a directory they control, resulting in arbitrary code execution as root.

 https://db.gcve.eu/vuln/ghsa-vr33-8mcv-hqqf GHSA-vr33-8mcv-hqqf 2026-11-11T03:53:19.226862+00:00

The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal. This lets a non-owner subscription user redirect a privileged backend session into a directory they control, resulting in arbitrary code execution as root.