<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 08 Jun 2026 06:22:28 +0000</lastBuildDate>
    <item>
      <title>eaca6378-a48d-435f-be94-51128235f3ab</title>
      <link>https://vulnerability.circl.lu/sighting/eaca6378-a48d-435f-be94-51128235f3ab/export</link>
      <description>{"uuid": "eaca6378-a48d-435f-be94-51128235f3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5063", "type": "seen", "source": "https://t.me/cibsecurity/70767", "content": "\u203c CVE-2023-5063 \u203c\n\nThe Widget Responsive for Youtube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube' shortcode in versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:09.000000Z"}</description>
      <content:encoded>{"uuid": "eaca6378-a48d-435f-be94-51128235f3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5063", "type": "seen", "source": "https://t.me/cibsecurity/70767", "content": "\u203c CVE-2023-5063 \u203c\n\nThe Widget Responsive for Youtube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube' shortcode in versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eaca6378-a48d-435f-be94-51128235f3ab/export</guid>
      <pubDate>Wed, 20 Sep 2023 07:30:09 +0000</pubDate>
    </item>
    <item>
      <title>7d5c79d6-5ee6-469c-a45a-5ecef45b870a</title>
      <link>https://vulnerability.circl.lu/sighting/7d5c79d6-5ee6-469c-a45a-5ecef45b870a/export</link>
      <description>{"uuid": "7d5c79d6-5ee6-469c-a45a-5ecef45b870a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/ctinow/157344", "content": "https://ift.tt/zsNgCix\nCVE-2023-50639", "creation_timestamp": "2023-12-20T22:22:31.000000Z"}</description>
      <content:encoded>{"uuid": "7d5c79d6-5ee6-469c-a45a-5ecef45b870a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/ctinow/157344", "content": "https://ift.tt/zsNgCix\nCVE-2023-50639", "creation_timestamp": "2023-12-20T22:22:31.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7d5c79d6-5ee6-469c-a45a-5ecef45b870a/export</guid>
      <pubDate>Wed, 20 Dec 2023 22:22:31 +0000</pubDate>
    </item>
    <item>
      <title>ddfe4082-ad79-4145-846b-95733034e0ec</title>
      <link>https://vulnerability.circl.lu/sighting/ddfe4082-ad79-4145-846b-95733034e0ec/export</link>
      <description>{"uuid": "ddfe4082-ad79-4145-846b-95733034e0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/arpsyndicate/2407", "content": "#ExploitObserverAlert\n\nCVE-2023-50639\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50639. Cross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page.\n\nFIRST-EPSS: 0.000450000\nNVD-IS: 2.7\nNVD-ES: 2.3", "creation_timestamp": "2024-01-04T02:18:53.000000Z"}</description>
      <content:encoded>{"uuid": "ddfe4082-ad79-4145-846b-95733034e0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/arpsyndicate/2407", "content": "#ExploitObserverAlert\n\nCVE-2023-50639\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50639. Cross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page.\n\nFIRST-EPSS: 0.000450000\nNVD-IS: 2.7\nNVD-ES: 2.3", "creation_timestamp": "2024-01-04T02:18:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ddfe4082-ad79-4145-846b-95733034e0ec/export</guid>
      <pubDate>Thu, 04 Jan 2024 02:18:53 +0000</pubDate>
    </item>
    <item>
      <title>481db54e-4462-4b20-b757-9624ac5f6e03</title>
      <link>https://vulnerability.circl.lu/sighting/481db54e-4462-4b20-b757-9624ac5f6e03/export</link>
      <description>{"uuid": "481db54e-4462-4b20-b757-9624ac5f6e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/162856", "content": "https://ift.tt/bFogI8d\nCVE-2023-50630", "creation_timestamp": "2024-01-04T09:26:45.000000Z"}</description>
      <content:encoded>{"uuid": "481db54e-4462-4b20-b757-9624ac5f6e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/162856", "content": "https://ift.tt/bFogI8d\nCVE-2023-50630", "creation_timestamp": "2024-01-04T09:26:45.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/481db54e-4462-4b20-b757-9624ac5f6e03/export</guid>
      <pubDate>Thu, 04 Jan 2024 09:26:45 +0000</pubDate>
    </item>
    <item>
      <title>12a5f8a5-b994-43f8-8cef-95a0645c239d</title>
      <link>https://vulnerability.circl.lu/sighting/12a5f8a5-b994-43f8-8cef-95a0645c239d/export</link>
      <description>{"uuid": "12a5f8a5-b994-43f8-8cef-95a0645c239d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/cibsecurity/74397", "content": "\u203c\ufe0fCVE-2023-50630\u203c\ufe0f\n\nCross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:32:30.000000Z"}</description>
      <content:encoded>{"uuid": "12a5f8a5-b994-43f8-8cef-95a0645c239d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/cibsecurity/74397", "content": "\u203c\ufe0fCVE-2023-50630\u203c\ufe0f\n\nCross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:32:30.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/12a5f8a5-b994-43f8-8cef-95a0645c239d/export</guid>
      <pubDate>Fri, 05 Jan 2024 01:32:30 +0000</pubDate>
    </item>
    <item>
      <title>50aacc5c-5bfb-41fa-8159-219f6b2712b1</title>
      <link>https://vulnerability.circl.lu/sighting/50aacc5c-5bfb-41fa-8159-219f6b2712b1/export</link>
      <description>{"uuid": "50aacc5c-5bfb-41fa-8159-219f6b2712b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/166067", "content": "https://ift.tt/mVfqS0g\nCVE-2023-50630 Exploit", "creation_timestamp": "2024-01-10T19:17:06.000000Z"}</description>
      <content:encoded>{"uuid": "50aacc5c-5bfb-41fa-8159-219f6b2712b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/166067", "content": "https://ift.tt/mVfqS0g\nCVE-2023-50630 Exploit", "creation_timestamp": "2024-01-10T19:17:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/50aacc5c-5bfb-41fa-8159-219f6b2712b1/export</guid>
      <pubDate>Wed, 10 Jan 2024 19:17:06 +0000</pubDate>
    </item>
    <item>
      <title>b1936be4-ea93-4445-bf49-269083403853</title>
      <link>https://vulnerability.circl.lu/sighting/b1936be4-ea93-4445-bf49-269083403853/export</link>
      <description>{"uuid": "b1936be4-ea93-4445-bf49-269083403853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/ctinow/167957", "content": "https://ift.tt/7LRrXV4\nCVE-2023-50639 | CuteHttpFileServer 1.0/2.0 File Upload cross site scripting", "creation_timestamp": "2024-01-14T08:36:50.000000Z"}</description>
      <content:encoded>{"uuid": "b1936be4-ea93-4445-bf49-269083403853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/ctinow/167957", "content": "https://ift.tt/7LRrXV4\nCVE-2023-50639 | CuteHttpFileServer 1.0/2.0 File Upload cross site scripting", "creation_timestamp": "2024-01-14T08:36:50.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b1936be4-ea93-4445-bf49-269083403853/export</guid>
      <pubDate>Sun, 14 Jan 2024 08:36:50 +0000</pubDate>
    </item>
    <item>
      <title>973f6b10-fcc6-435b-a22d-03bc8a6c8b16</title>
      <link>https://vulnerability.circl.lu/sighting/973f6b10-fcc6-435b-a22d-03bc8a6c8b16/export</link>
      <description>{"uuid": "973f6b10-fcc6-435b-a22d-03bc8a6c8b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/172577", "content": "https://ift.tt/RxuUjOd\nCVE-2023-50630 | xiweicheng TMS 2.28.0 Click Here cross site scripting (Issue 19)", "creation_timestamp": "2024-01-24T08:41:37.000000Z"}</description>
      <content:encoded>{"uuid": "973f6b10-fcc6-435b-a22d-03bc8a6c8b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/172577", "content": "https://ift.tt/RxuUjOd\nCVE-2023-50630 | xiweicheng TMS 2.28.0 Click Here cross site scripting (Issue 19)", "creation_timestamp": "2024-01-24T08:41:37.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/973f6b10-fcc6-435b-a22d-03bc8a6c8b16/export</guid>
      <pubDate>Wed, 24 Jan 2024 08:41:37 +0000</pubDate>
    </item>
  </channel>
</rss>
