https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:08:49.576963+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-187419 EUVD-2026-187419 2026-10-06T19:08:49.579922+00:00 EUVD-2026-187419 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43484 fkie_cve-2023-43484 2026-10-06T19:08:49.579960+00:00

Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/ghsa-9q5v-3474-69v4 GHSA-9q5v-3474-69v4 2026-10-06T19:08:49.579993+00:00

Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/gsd-2023-43484 gsd-2023-43484 2026-10-06T19:08:49.580009+00:00 gsd-2023-43484 https://cve.radiocsirt.org/vuln/jvndb-2023-000094 jvndb-2023-000094 2026-10-06T19:08:49.580021+00:00

WordPress plugin "Welcart e-Commerce" provided by Collne Inc. contains multiple vulnerabilities listed below. * Unrestricted Upload of File with Dangerous Type (CWE-434) - CVE-2023-40219 * Path Traversal (CWE-22) - CVE-2023-40532 * Cross-site Scripting in registration process of Item List page (CWE-79) - CVE-2023-41233 * Cross-site Scripting in Credit Card Payment Setup page (CWE-79) - CVE-2023-41962 * Cross-site Scripting in Item List page (CWE-79) - CVE-2023-43484 * SQL Injection in Item List page (CWE-89) - CVE-2023-43493 * SQL Injection in Order Data Edit page (CWE-89) - CVE-2023-43610 * Cross-site Scripting in Order Data Edit page (CWE-79) - CVE-2023-43614 CVE-2023-40219 Akihiro Hashimoto reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-40532, CVE-2023-41233, CVE-2023-41962, CVE-2023-43484, CVE-2023-43493, CVE-2023-43610, CVE-2023-43614 Shogo Kumamaru of LAC CyberLink Co., Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.