https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:41:52.388712+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-23691 EUVD-2026-23691 2026-10-05T04:41:52.393155+00:00 EUVD-2026-23691 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24308 fkie_cve-2021-24308 2026-10-05T04:41:52.393188+00:00

The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a stored Cross-Site Scripting issue. This could allow low privilege users (such as students) to elevate their privilege via an XSS attack when an admin will view their profile.

 https://cve.radiocsirt.org/vuln/ghsa-3mxr-2h37-xpjx GHSA-3mxr-2h37-xpjx 2026-10-05T04:41:52.393244+00:00

The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a stored Cross-Site Scripting issue. This could allow low privilege users (such as students) to elevate their privilege via an XSS attack when an admin will view their profile.

 https://cve.radiocsirt.org/vuln/gsd-2021-24308 gsd-2021-24308 2026-10-05T04:41:52.393285+00:00 gsd-2021-24308