https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:36:32.804365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24246 CVE-2021-24246 — WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS 2026-10-08T18:36:32.822826+00:00

Affected: PureThemes Workscout Core, PureThemes WorkScout

The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame Scripting issues