https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:45:01.320536+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24341 CVE-2021-24341 — Xllentech English Islamic Calendar < 2.6.8 - Authenticated SQL Injection 2026-10-15T19:45:01.321714+00:00

Affected: Unknown Xllentech English Islamic Calendar

When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used in a SQL statement, leading to SQL injection.