<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 02 May 2026 05:12:22 +0000</lastBuildDate>
    <item>
      <title>9a93597d-9637-472c-b577-23757bf3935a</title>
      <link>https://db.gcve.eu/sighting/9a93597d-9637-472c-b577-23757bf3935a/export</link>
      <description>{"uuid": "9a93597d-9637-472c-b577-23757bf3935a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-7703", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8283", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1apoc for CVE-2024-7646\nURL\uff1ahttps://github.com/lfillaz/CVE-2024-7703\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-17T14:46:06.000000Z"}</description>
      <content:encoded>{"uuid": "9a93597d-9637-472c-b577-23757bf3935a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-7703", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8283", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1apoc for CVE-2024-7646\nURL\uff1ahttps://github.com/lfillaz/CVE-2024-7703\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-17T14:46:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/9a93597d-9637-472c-b577-23757bf3935a/export</guid>
      <pubDate>Sat, 17 Aug 2024 14:46:06 +0000</pubDate>
    </item>
    <item>
      <title>da08d8f2-15a5-438c-86f0-29a78b128e88</title>
      <link>https://db.gcve.eu/sighting/da08d8f2-15a5-438c-86f0-29a78b128e88/export</link>
      <description>{"uuid": "da08d8f2-15a5-438c-86f0-29a78b128e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-7703", "type": "seen", "source": "https://t.me/cvedetector/3432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7703 - ARMember - WordPress Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-7703 \nPublished : Aug. 17, 2024, 12:15 p.m. | 31\u00a0minutes ago \nDescription : The ARMember \u2013 Membership Plugin, Content Restriction, Member Levels, User Profile &amp;amp; User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.0.37 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-17T14:50:21.000000Z"}</description>
      <content:encoded>{"uuid": "da08d8f2-15a5-438c-86f0-29a78b128e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-7703", "type": "seen", "source": "https://t.me/cvedetector/3432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7703 - ARMember - WordPress Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-7703 \nPublished : Aug. 17, 2024, 12:15 p.m. | 31\u00a0minutes ago \nDescription : The ARMember \u2013 Membership Plugin, Content Restriction, Member Levels, User Profile &amp;amp; User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.0.37 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-17T14:50:21.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/da08d8f2-15a5-438c-86f0-29a78b128e88/export</guid>
      <pubDate>Sat, 17 Aug 2024 14:50:21 +0000</pubDate>
    </item>
    <item>
      <title>223d1101-3a2a-4974-ac4c-767fbf0b305e</title>
      <link>https://db.gcve.eu/sighting/223d1101-3a2a-4974-ac4c-767fbf0b305e/export</link>
      <description>{"uuid": "223d1101-3a2a-4974-ac4c-767fbf0b305e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-7703", "type": "seen", "source": "https://t.me/CveExploits/21", "content": "\ud83d\udea8 CVE-2024-7703\nThe ARMember \u2013 Membership Plugin, Content Restriction, Member Levels, User Profile &amp;amp; User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.0.37 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", "creation_timestamp": "2024-08-17T15:01:38.000000Z"}</description>
      <content:encoded>{"uuid": "223d1101-3a2a-4974-ac4c-767fbf0b305e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-7703", "type": "seen", "source": "https://t.me/CveExploits/21", "content": "\ud83d\udea8 CVE-2024-7703\nThe ARMember \u2013 Membership Plugin, Content Restriction, Member Levels, User Profile &amp;amp; User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.0.37 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", "creation_timestamp": "2024-08-17T15:01:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/223d1101-3a2a-4974-ac4c-767fbf0b305e/export</guid>
      <pubDate>Sat, 17 Aug 2024 15:01:38 +0000</pubDate>
    </item>
  </channel>
</rss>
