https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:47:00.600234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4476 CVE-2023-4476 — Locatoraid Store Locator < 3.9.24 - Reflected XSS 2026-10-05T18:47:00.602026+00:00

Affected: Unknown Locatoraid Store Locator

The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.