https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:16:42.455186+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-103642 cnvd-2021-103642 2026-10-09T12:16:42.458255+00:00 cnvd-2021-103642 https://cve.radiocsirt.org/vuln/euvd-2026-24059 EUVD-2026-24059 2026-10-09T12:16:42.458289+00:00 EUVD-2026-24059 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24672 fkie_cve-2021-24672 2026-10-09T12:16:42.458303+00:00

The One User Avatar WordPress plugin before 2.3.7 does not escape the link and target attributes of its shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

 https://cve.radiocsirt.org/vuln/ghsa-4f2g-r3q6-6v29 GHSA-4f2g-r3q6-6v29 2026-10-09T12:16:42.458330+00:00

The One User Avatar WordPress plugin before 2.3.7 does not escape the link and target attributes of its shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

 https://cve.radiocsirt.org/vuln/gsd-2021-24672 gsd-2021-24672 2026-10-09T12:16:42.458346+00:00 gsd-2021-24672