<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 22 Jul 2026 21:16:29 +0000</lastBuildDate>
    <item>
      <title>1397696f-41aa-46a4-b8f1-2055f4751e85</title>
      <link>https://db.gcve.eu/sighting/1397696f-41aa-46a4-b8f1-2055f4751e85/export</link>
      <description>{"uuid": "1397696f-41aa-46a4-b8f1-2055f4751e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24488", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24488.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}</description>
      <content:encoded>{"uuid": "1397696f-41aa-46a4-b8f1-2055f4751e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24488", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24488.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/1397696f-41aa-46a4-b8f1-2055f4751e85/export</guid>
      <pubDate>Thu, 27 Apr 2023 09:58:59 +0000</pubDate>
    </item>
    <item>
      <title>2e3557c3-e568-4c46-bdd4-f9786ec6f7c4</title>
      <link>https://db.gcve.eu/sighting/2e3557c3-e568-4c46-bdd4-f9786ec6f7c4/export</link>
      <description>{"uuid": "2e3557c3-e568-4c46-bdd4-f9786ec6f7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24489", "type": "seen", "source": "https://t.me/cibsecurity/31119", "content": "\u203c CVE-2021-24489 \u203c\n\nThe Request a Quote WordPress plugin before 2.3.5 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-25T18:13:44.000000Z"}</description>
      <content:encoded>{"uuid": "2e3557c3-e568-4c46-bdd4-f9786ec6f7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24489", "type": "seen", "source": "https://t.me/cibsecurity/31119", "content": "\u203c CVE-2021-24489 \u203c\n\nThe Request a Quote WordPress plugin before 2.3.5 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-25T18:13:44.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2e3557c3-e568-4c46-bdd4-f9786ec6f7c4/export</guid>
      <pubDate>Mon, 25 Oct 2021 18:13:44 +0000</pubDate>
    </item>
    <item>
      <title>a5e14428-9882-4721-a640-32e394fe92cd</title>
      <link>https://db.gcve.eu/sighting/a5e14428-9882-4721-a640-32e394fe92cd/export</link>
      <description>{"uuid": "a5e14428-9882-4721-a640-32e394fe92cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24483", "type": "seen", "source": "https://t.me/cibsecurity/26666", "content": "\u203c CVE-2021-24483 \u203c\n\nThe get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-02T14:27:38.000000Z"}</description>
      <content:encoded>{"uuid": "a5e14428-9882-4721-a640-32e394fe92cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24483", "type": "seen", "source": "https://t.me/cibsecurity/26666", "content": "\u203c CVE-2021-24483 \u203c\n\nThe get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-02T14:27:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a5e14428-9882-4721-a640-32e394fe92cd/export</guid>
      <pubDate>Mon, 02 Aug 2021 14:27:38 +0000</pubDate>
    </item>
    <item>
      <title>ec54ac12-614b-41bb-b427-c3109cd10c99</title>
      <link>https://db.gcve.eu/sighting/ec54ac12-614b-41bb-b427-c3109cd10c99/export</link>
      <description>{"uuid": "ec54ac12-614b-41bb-b427-c3109cd10c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24481", "type": "seen", "source": "https://t.me/cibsecurity/26655", "content": "\u203c CVE-2021-24481 \u203c\n\nThe Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its \"Allowed hosts\" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-02T14:27:19.000000Z"}</description>
      <content:encoded>{"uuid": "ec54ac12-614b-41bb-b427-c3109cd10c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24481", "type": "seen", "source": "https://t.me/cibsecurity/26655", "content": "\u203c CVE-2021-24481 \u203c\n\nThe Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its \"Allowed hosts\" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-02T14:27:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/ec54ac12-614b-41bb-b427-c3109cd10c99/export</guid>
      <pubDate>Mon, 02 Aug 2021 14:27:19 +0000</pubDate>
    </item>
    <item>
      <title>a7d45d72-fda6-4895-92ac-96c280a0acfb</title>
      <link>https://db.gcve.eu/sighting/a7d45d72-fda6-4895-92ac-96c280a0acfb/export</link>
      <description>{"uuid": "a7d45d72-fda6-4895-92ac-96c280a0acfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24484", "type": "seen", "source": "https://t.me/cibsecurity/26651", "content": "\u203c CVE-2021-24484 \u203c\n\nThe get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-02T14:27:16.000000Z"}</description>
      <content:encoded>{"uuid": "a7d45d72-fda6-4895-92ac-96c280a0acfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24484", "type": "seen", "source": "https://t.me/cibsecurity/26651", "content": "\u203c CVE-2021-24484 \u203c\n\nThe get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-02T14:27:16.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a7d45d72-fda6-4895-92ac-96c280a0acfb/export</guid>
      <pubDate>Mon, 02 Aug 2021 14:27:16 +0000</pubDate>
    </item>
  </channel>
</rss>
