https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:28:45.341800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24128 CVE-2021-24128 — Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS) 2026-10-06T18:28:45.343849+00:00

Affected: Unknown Team Members

Unvalidated input and lack of output encoding in the Team Members WordPress plugin, versions before 5.0.4, lead to Cross-site scripting vulnerabilities allowing medium-privileged authenticated attacker (contributor+) to inject arbitrary web script or HTML via the 'Description/biography' of a member.