https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T16:52:45.399437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287671 EUVD-2026-287671 2026-10-16T16:52:45.445686+00:00 EUVD-2026-287671 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13802 fkie_cve-2024-13802 2026-10-16T16:52:45.445724+00:00

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintown_events' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-9fr9-5vhp-58hw GHSA-9fr9-5vhp-58hw 2026-10-16T16:52:45.445759+00:00

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintown_events' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.