https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:50:32.130231+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-22521 cnvd-2018-22521 2026-10-08T14:50:32.136084+00:00 cnvd-2018-22521 https://cve.radiocsirt.org/vuln/euvd-2026-67913 EUVD-2026-67913 2026-10-08T14:50:32.136121+00:00 EUVD-2026-67913 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16164 fkie_cve-2018-16164 2026-10-08T14:50:32.136135+00:00

Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-4429-pqf2-hv4m GHSA-4429-pqf2-hv4m 2026-10-08T14:50:32.136164+00:00

Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2018-16164 gsd-2018-16164 2026-10-08T14:50:32.136179+00:00 gsd-2018-16164 https://cve.radiocsirt.org/vuln/jvndb-2018-000115 jvndb-2018-000115 2026-10-08T14:50:32.136190+00:00

The WordPress plugin "Event Calendar WD" provided by Web-Dorado contains a stored cross-site scripting vulnerability (CWE-79). Yuta Kitaoka of TokyoDenkiUniversity Cryptography Lab reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.