https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:03:17.392282+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24880 CVE-2021-24880 — SupportCandy < 2.2.7 - Contributor+ Stored Cross-Site Scripting 2026-10-06T21:03:17.408129+00:00

Affected: Unknown SupportCandy – Helpdesk & Support Ticket System

The SupportCandy WordPress plugin before 2.2.7 does not validate and escape the page attribute of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks