<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 08 Jun 2026 19:09:08 +0000</lastBuildDate>
    <item>
      <title>1531c380-ca57-4359-abca-fbbe3802481c</title>
      <link>https://vulnerability.circl.lu/sighting/1531c380-ca57-4359-abca-fbbe3802481c/export</link>
      <description>{"uuid": "1531c380-ca57-4359-abca-fbbe3802481c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24465", "type": "seen", "source": "https://t.me/cibsecurity/29862", "content": "\u203c CVE-2021-24465 \u203c\n\nThe Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL statement, leading to an authenticated SQL Injection issue. The injection also allows the returned values to be manipulated in a way that could lead to data disclosure and arbitrary objects to be deserialized.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T16:23:18.000000Z"}</description>
      <content:encoded>{"uuid": "1531c380-ca57-4359-abca-fbbe3802481c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24465", "type": "seen", "source": "https://t.me/cibsecurity/29862", "content": "\u203c CVE-2021-24465 \u203c\n\nThe Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL statement, leading to an authenticated SQL Injection issue. The injection also allows the returned values to be manipulated in a way that could lead to data disclosure and arbitrary objects to be deserialized.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T16:23:18.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1531c380-ca57-4359-abca-fbbe3802481c/export</guid>
      <pubDate>Mon, 04 Oct 2021 16:23:18 +0000</pubDate>
    </item>
  </channel>
</rss>
