https://vulnerability.circl.lu/sightings/feed 2026-06-25T05:48:26.952979+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5f4a6f32-3000-477e-8ce7-3ae3a93c51d2/export 2026-06-25T05:48:26.975775+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5f4a6f32-3000-477e-8ce7-3ae3a93c51d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22817", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3dv6ivh2d", "content": "", "creation_timestamp": "2025-01-09T16:18:22.847973Z"} 2025-01-09T16:18:22.847973+00:00 https://vulnerability.circl.lu/sighting/4b9a2f46-fbc7-4e01-8077-4ab678d8d3cd/export 2026-06-25T05:48:26.975488+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4b9a2f46-fbc7-4e01-8077-4ab678d8d3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22817", "type": "seen", "source": "https://t.me/cvedetector/14863", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-22817 - Venutius BP Profile Shortcodes Extra Cross-site Scripting\", \n \"Content\": \"CVE ID : CVE-2025-22817 \nPublished : Jan. 9, 2025, 4:16 p.m. | 28\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Venutius BP Profile Shortcodes Extra allows Stored XSS.This issue affects BP Profile Shortcodes Extra: from n/a through 2.6.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"09 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T17:46:05.000000Z"} 2025-01-09T17:46:05+00:00 https://vulnerability.circl.lu/sighting/c9393c9c-71c8-4ed7-b487-91e828086d19/export 2026-06-25T05:48:26.972792+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c9393c9c-71c8-4ed7-b487-91e828086d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22817", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1236", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22817\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Venutius BP Profile Shortcodes Extra allows Stored XSS.This issue affects BP Profile Shortcodes Extra: from n/a through 2.6.0.\n\ud83d\udccf Published: 2025-01-09T15:39:01.733Z\n\ud83d\udccf Modified: 2025-01-10T20:44:43.181Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/bp-profile-shortcodes-extra/vulnerability/wordpress-bp-profile-shortcodes-extra-plugin-2-6-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-10T21:04:13.000000Z"} 2025-01-10T21:04:13+00:00