https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:59:25.985040+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-322455 EUVD-2026-322455 2026-10-08T07:59:26.039129+00:00 EUVD-2026-322455 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47924 fkie_cve-2021-47924 2026-10-08T07:59:26.039183+00:00

Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.

 https://cve.radiocsirt.org/vuln/ghsa-qwj3-2cv8-c6jp GHSA-qwj3-2cv8-c6jp 2026-10-08T07:59:26.039233+00:00

Ultimate Product Catalog 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.