Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:23:40 +0000 CVE-2026-87786 — Dewa Kirim <= 1.0.0 - Unauthenticated Stored XSS via Checkout Coordinates https://db.gcve.eu/vuln/cve-2026-87786 <p><strong>Affected:</strong> Unknown Dewa Kirim</p> <p>The Dewa Kirim WordPress plugin through 1.0.0 does not escape delivery coordinates submitted at checkout before outputting them inside an inline script, allowing unauthenticated users to store JavaScript that runs in the session of an administrator who later opens the order.</p> <p><strong>Affected:</strong> Unknown Dewa Kirim</p> <p>The Dewa Kirim WordPress plugin through 1.0.0 does not escape delivery coordinates submitted at checkout before outputting them inside an inline script, allowing unauthenticated users to store JavaScript that runs in the session of an administrator who later opens the order.</p> https://db.gcve.eu/vuln/cve-2026-87786