https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T00:47:41.363082+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-44296 cnvd-2021-44296 2026-10-05T00:47:41.443679+00:00 cnvd-2021-44296 https://cve.radiocsirt.org/vuln/euvd-2026-23699 EUVD-2026-23699 2026-10-05T00:47:41.443720+00:00 EUVD-2026-23699 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24330 fkie_cve-2021-24330 2026-10-05T00:47:41.443736+00:00

The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privilege users to set XSS payload in them, which will either be executed on pages generated by the plugin, or the whole website depending on the settings used.

 https://cve.radiocsirt.org/vuln/ghsa-jpx9-hmgp-grj6 GHSA-jpx9-hmgp-grj6 2026-10-05T00:47:41.443768+00:00

The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privilege users to set XSS payload in them, which will either be executed on pages generated by the plugin, or the whole website depending on the settings used.

 https://cve.radiocsirt.org/vuln/gsd-2021-24330 gsd-2021-24330 2026-10-05T00:47:41.443787+00:00 gsd-2021-24330