https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 06:09:44 +0000 https://db.gcve.eu/vuln/cve-2026-119054 <p><strong>Affected:</strong> Themeisle Multiple Pages Generator by Themeisle</p> <p>Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the [mpg] and [mpg_match] shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by html_entity_decode() and rendered unescaped through {{mpg_url}}, executing script in administrators&#39; browsers.</p> <p><strong>Affected:</strong> Themeisle Multiple Pages Generator by Themeisle</p> <p>Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the [mpg] and [mpg_match] shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by html_entity_decode() and rendered unescaped through {{mpg_url}}, executing script in administrators&#39; browsers.</p> https://db.gcve.eu/vuln/cve-2026-119054