<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 06 Jun 2026 13:03:19 +0000</lastBuildDate>
    <item>
      <title>a4756ddc-040e-4b11-b77d-2d65f68be0b9</title>
      <link>https://vulnerability.circl.lu/sighting/a4756ddc-040e-4b11-b77d-2d65f68be0b9/export</link>
      <description>{"uuid": "a4756ddc-040e-4b11-b77d-2d65f68be0b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24974", "type": "seen", "source": "https://t.me/cibsecurity/36113", "content": "\u203c CVE-2021-24974 \u203c\n\nThe Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue (which will be triggered in the admin dashboard) due to the lack of escaping.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-24T12:17:21.000000Z"}</description>
      <content:encoded>{"uuid": "a4756ddc-040e-4b11-b77d-2d65f68be0b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24974", "type": "seen", "source": "https://t.me/cibsecurity/36113", "content": "\u203c CVE-2021-24974 \u203c\n\nThe Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue (which will be triggered in the admin dashboard) due to the lack of escaping.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-24T12:17:21.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a4756ddc-040e-4b11-b77d-2d65f68be0b9/export</guid>
      <pubDate>Mon, 24 Jan 2022 12:17:21 +0000</pubDate>
    </item>
  </channel>
</rss>
