https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T19:31:11.399234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24797 CVE-2021-24797 — Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scripting 2026-10-18T19:31:11.400482+00:00

Affected: Unknown Tickera – WordPress Event Ticketing

The Tickera WordPress plugin before 3.4.8.3 does not properly sanitise and escape the Name fields of booked Events before outputting them in the Orders admin dashboard, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins.