Skip to content
OpenAdvisories

Vendor

rachelos

6 known vulnerabilities.

Products

WeRSS we-mp-rss 4 we-mp-rss 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-2825

    rachelos WeRSS we-mp-rss Article fix.py fix_html cross site scripting

    A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8. This impacts the function fix_html of the file tools/fix.py of the component Article Module. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely…

    rachelos WeRSS we-mp-rss
  • Low 3.7
    CVE-2026-2215

    rachelos WeRSS we-mp-rss JWT auth.py default key

    A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRET_KEY results in use of default cryptographi…

    rachelos WeRSS we-mp-rss