https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:00:40.790576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-102822 cnvd-2021-102822 2026-10-04T13:00:40.871630+00:00 cnvd-2021-102822 https://cve.radiocsirt.org/vuln/euvd-2026-21858 EUVD-2026-21858 2026-10-04T13:00:40.871673+00:00 EUVD-2026-21858 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20840 fkie_cve-2021-20840 2026-10-04T13:00:40.871688+00:00

Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-6wcx-352r-rcj5 GHSA-6wcx-352r-rcj5 2026-10-04T13:00:40.871719+00:00

Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2021-20840 gsd-2021-20840 2026-10-04T13:00:40.871735+00:00 gsd-2021-20840 https://cve.radiocsirt.org/vuln/jvndb-2021-000094 jvndb-2021-000094 2026-10-04T13:00:40.871747+00:00

WordPress Plugin "Booking Package - Appointment Booking Calendar System" provided by Saasproject contains a cross-site scripting vulnerability (CWE-79) due to the flaw in handling some URL query parameters. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.