https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:21:29.114254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366735 EUVD-2026-366735 2026-10-06T09:21:29.118005+00:00 EUVD-2026-366735 https://cve.radiocsirt.org/vuln/fkie_cve-2026-83546 fkie_cve-2026-83546 2026-10-06T09:21:29.118061+00:00

The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.

 https://cve.radiocsirt.org/vuln/ghsa-mvvr-5rcc-xqpx GHSA-mvvr-5rcc-xqpx 2026-10-06T09:21:29.118115+00:00

The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.