https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:43:43.610080+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24481 CVE-2021-24481 — Any Hostname <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS) 2026-10-15T22:43:43.611487+00:00

Affected: Unknown Any Hostname

The Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its "Allowed hosts" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it