https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:10:04 +0000 https://cve.radiocsirt.org/vuln/cve-2021-24306 <p><strong>Affected:</strong> Ultimate Member – User Profile, User Registration, Login &amp; Membership Plugin</p> <p>The Ultimate Member – User Profile, User Registration, Login &amp; Membership Plugin WordPress plugin before 2.1.20 did not properly sanitise, validate or encode the query string when generating a link to edit user&#39;s own profile, leading to an authenticated reflected Cross-Site Scripting issue. Knowledge of the targeted username is required to exploit this, and attackers would then need to make the related logged in user open a malicious link.</p> <p><strong>Affected:</strong> Ultimate Member – User Profile, User Registration, Login &amp; Membership Plugin</p> <p>The Ultimate Member – User Profile, User Registration, Login &amp; Membership Plugin WordPress plugin before 2.1.20 did not properly sanitise, validate or encode the query string when generating a link to edit user&#39;s own profile, leading to an authenticated reflected Cross-Site Scripting issue. Knowledge of the targeted username is required to exploit this, and attackers would then need to make the related logged in user open a malicious link.</p> https://cve.radiocsirt.org/vuln/cve-2021-24306