<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-25T07:59:27.355800+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3169414-3d2c-422c-b128-652764a6f8ea/export</id>
    <title>f3169414-3d2c-422c-b128-652764a6f8ea</title>
    <updated>2026-06-25T07:59:27.372819+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3169414-3d2c-422c-b128-652764a6f8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25792", "type": "seen", "source": "https://t.me/cibsecurity/63212", "content": "\u203c CVE-2023-25792 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XiaoMac WP Open Social plugin &amp;lt;=\u00c2\u00a05.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T14:31:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3169414-3d2c-422c-b128-652764a6f8ea/export"/>
    <published>2023-05-03T14:31:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ed5c5706-a464-43a0-836a-6baa6a20b9c8/export</id>
    <title>ed5c5706-a464-43a0-836a-6baa6a20b9c8</title>
    <updated>2026-06-25T07:59:27.372747+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ed5c5706-a464-43a0-836a-6baa6a20b9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25797", "type": "seen", "source": "https://t.me/cibsecurity/63214", "content": "\u203c CVE-2023-25797 \u203c\n\nAuth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin &amp;lt;=\u00c2\u00a04.1.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T14:31:02.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ed5c5706-a464-43a0-836a-6baa6a20b9c8/export"/>
    <published>2023-05-03T14:31:02+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b9db55b7-eb47-4b67-8a15-fcd0b1b1f9d4/export</id>
    <title>b9db55b7-eb47-4b67-8a15-fcd0b1b1f9d4</title>
    <updated>2026-06-25T07:59:27.372673+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b9db55b7-eb47-4b67-8a15-fcd0b1b1f9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25796", "type": "seen", "source": "https://t.me/cibsecurity/63223", "content": "\u203c CVE-2023-25796 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Include WP BaiDu Submit plugin &amp;lt;=\u00c2\u00a01.2.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T16:30:59.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b9db55b7-eb47-4b67-8a15-fcd0b1b1f9d4/export"/>
    <published>2023-05-03T16:30:59+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d0f91374-86a2-4bfb-81ab-913d8a0759f0/export</id>
    <title>d0f91374-86a2-4bfb-81ab-913d8a0759f0</title>
    <updated>2026-06-25T07:59:27.372599+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d0f91374-86a2-4bfb-81ab-913d8a0759f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25798", "type": "seen", "source": "https://t.me/cibsecurity/63224", "content": "\u203c CVE-2023-25798 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin &amp;lt;=\u00c2\u00a01.1.9 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T16:51:32.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d0f91374-86a2-4bfb-81ab-913d8a0759f0/export"/>
    <published>2023-05-03T16:51:32+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/125d797d-ad17-46b6-98ec-e03b1e5f83a8/export</id>
    <title>125d797d-ad17-46b6-98ec-e03b1e5f83a8</title>
    <updated>2026-06-25T07:59:27.372516+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "125d797d-ad17-46b6-98ec-e03b1e5f83a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2579", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4610", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC for CVE-2023-2579\nURL\uff1ahttps://github.com/daniloalbuqrque/poc-cve-xss-inventory-press-plugin\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-06-25T05:29:15.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/125d797d-ad17-46b6-98ec-e03b1e5f83a8/export"/>
    <published>2023-06-25T05:29:15+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e1f7c37a-4051-4774-985c-1117b33b1ced/export</id>
    <title>e1f7c37a-4051-4774-985c-1117b33b1ced</title>
    <updated>2026-06-25T07:59:27.372417+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e1f7c37a-4051-4774-985c-1117b33b1ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2579", "type": "seen", "source": "https://t.me/cibsecurity/66820", "content": "\u203c CVE-2023-2579 \u203c\n\nThe InventoryPress WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T18:40:17.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e1f7c37a-4051-4774-985c-1117b33b1ced/export"/>
    <published>2023-07-17T18:40:17+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b860060e-6e47-45f0-b65d-25a133d0c694/export</id>
    <title>b860060e-6e47-45f0-b65d-25a133d0c694</title>
    <updated>2026-06-25T07:59:27.370742+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b860060e-6e47-45f0-b65d-25a133d0c694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25790", "type": "seen", "source": "https://t.me/arpsyndicate/4873", "content": "#ExploitObserverAlert\n\nCVE-2023-25790\n\nDESCRIPTION: Exploit Observer has 11 entries in 3 file formats related to CVE-2023-25790. Improper Authentication, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos WoodMart allows Cross-Site Scripting (XSS).This issue affects WoodMart: from n/a through 7.0.4.\n\nFIRST-EPSS: 0.000430000\nARPS-PRIORITY: 0.865513", "creation_timestamp": "2024-04-25T21:47:36.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b860060e-6e47-45f0-b65d-25a133d0c694/export"/>
    <published>2024-04-25T21:47:36+00:00</published>
  </entry>
</feed>
