https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T13:08:06.456019+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109987 fkie_cve-2026-109987 2026-10-25T13:08:06.480118+00:00

The PixelYourSite WordPress plugin before 11.4.3, PixelYourSite Pro WordPress plugin before 12.6.8 do not sanitise and escape a cookie value before printing it into the page output, which, on a site running a full-page cache, allows unauthenticated attackers to store a Cross-Site Scripting payload in the cached page that is then served to other visitors.

 https://db.gcve.eu/vuln/ghsa-vwmv-9mxc-35hf GHSA-vwmv-9mxc-35hf 2026-10-25T13:08:06.480213+00:00

The PixelYourSite WordPress plugin before 11.4.3, PixelYourSite Pro WordPress plugin before 12.6.8 do not sanitise and escape a cookie value before printing it into the page output, which, on a site running a full-page cache, allows unauthenticated attackers to store a Cross-Site Scripting payload in the cached page that is then served to other visitors.