https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 01 Jul 2026 04:51:10 +0000 https://vulnerability.circl.lu/sighting/0b74c858-115b-4550-9d61-1c18cd6aa734/export {"uuid": "0b74c858-115b-4550-9d61-1c18cd6aa734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24911", "type": "seen", "source": "https://t.me/cibsecurity/48479", "content": "\u203c CVE-2021-24911 \u203c\n\nThe Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin \"Who can translate ?\" setting.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-22T18:20:33.000000Z"} {"uuid": "0b74c858-115b-4550-9d61-1c18cd6aa734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24911", "type": "seen", "source": "https://t.me/cibsecurity/48479", "content": "\u203c CVE-2021-24911 \u203c\n\nThe Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin \"Who can translate ?\" setting.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-22T18:20:33.000000Z"} https://vulnerability.circl.lu/sighting/0b74c858-115b-4550-9d61-1c18cd6aa734/export Mon, 22 Aug 2022 18:20:33 +0000