https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:01:33.193735+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-162904 EUVD-2026-162904 2026-10-06T11:01:33.195972+00:00 EUVD-2026-162904 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6018 fkie_cve-2024-6018 2026-10-06T11:01:33.196003+00:00

The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

 https://cve.radiocsirt.org/vuln/ghsa-rp3x-cq62-cvh4 GHSA-rp3x-cq62-cvh4 2026-10-06T11:01:33.196032+00:00

The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers