https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 28 May 2026 22:50:02 +0000 https://vulnerability.circl.lu/sighting/37ec4de9-aed9-4f23-a001-d7431cd07966/export {"uuid": "37ec4de9-aed9-4f23-a001-d7431cd07966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8918", "type": "seen", "source": "https://t.me/cvedetector/8006", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-8918 - WordPress File Manager Pro Cross-Site Scripting (XSS) via Limited JavaScript File Upload\", \n \"Content\": \"CVE ID : CVE-2024-8918 \nPublished : Oct. 16, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 8.3.9. This is due to a lack of proper checks on allowed file types. This makes it possible for unauthenticated attackers, with permissions granted by an administrator, to upload .css and .js files, which could lead to Stored Cross-Site Scripting. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T10:30:06.000000Z"} {"uuid": "37ec4de9-aed9-4f23-a001-d7431cd07966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8918", "type": "seen", "source": "https://t.me/cvedetector/8006", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-8918 - WordPress File Manager Pro Cross-Site Scripting (XSS) via Limited JavaScript File Upload\", \n \"Content\": \"CVE ID : CVE-2024-8918 \nPublished : Oct. 16, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 8.3.9. This is due to a lack of proper checks on allowed file types. This makes it possible for unauthenticated attackers, with permissions granted by an administrator, to upload .css and .js files, which could lead to Stored Cross-Site Scripting. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T10:30:06.000000Z"} https://vulnerability.circl.lu/sighting/37ec4de9-aed9-4f23-a001-d7431cd07966/export Wed, 16 Oct 2024 10:30:06 +0000