https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:06:55.883483+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24365 CVE-2021-24365 — Admin Columns Free (< 4.3.2) & Pro (< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field 2026-10-06T20:06:55.885081+00:00

Affected: AdminColumns Admin Columns, AdminColumns Admin Columns Pro

The Admin Columns WordPress plugin Free before 4.3.2 and Pro before 5.5.2 allowed to configure individual columns for tables. Each column had a type. The type "Custom Field" allowed to choose an arbitrary database column to display in the table. There was no escaping applied to the contents of "Custom Field" columns.