https://vulnerability.circl.lu/sightings/feed 2026-06-28T10:21:46.486776+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8151a177-a618-4d2f-9e62-c56419017135/export 2026-06-28T10:21:46.513623+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8151a177-a618-4d2f-9e62-c56419017135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37952", "type": "seen", "source": "https://t.me/cvedetector/347", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37952 - Improper Privilege Management vulnerability in the\", \n \"Content\": \"CVE ID : CVE-2024-37952 \nPublished : July 9, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege Escalation.This issue affects BookYourTravel: from n/a through 8.18.17. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"09 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T15:36:53.000000Z"} 2024-07-09T15:36:53+00:00 https://vulnerability.circl.lu/sighting/6e84eadf-f901-4ef5-ad16-775445449aa4/export 2026-06-28T10:21:46.513520+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6e84eadf-f901-4ef5-ad16-775445449aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37959", "type": "seen", "source": "https://t.me/cvedetector/1267", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37959 - Atlas Public Policy Power BI Embedded for WordPress Stored XSS Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-37959 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Atlas Public Policy Power BI Embedded for WordPress allows Stored XSS.This issue affects Power BI Embedded for WordPress: from n/a through 1.1.7. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:16:56.000000Z"} 2024-07-20T12:16:56+00:00 https://vulnerability.circl.lu/sighting/c1fc101e-9d4a-4f2e-9531-4c5c4f929229/export 2026-06-28T10:21:46.513421+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c1fc101e-9d4a-4f2e-9531-4c5c4f929229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37956", "type": "seen", "source": "https://t.me/cvedetector/1269", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37956 - Vektor, Inc. VK All in One Expansion Unit Stored XSS Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-37956 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vektor,Inc. VK All in One Expansion Unit allows Stored XSS.This issue affects VK All in One Expansion Unit: from n/a through 9.98.1.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:16:58.000000Z"} 2024-07-20T12:16:58+00:00 https://vulnerability.circl.lu/sighting/9d00f6c2-3f51-4f72-9f55-a82f74ae9908/export 2026-06-28T10:21:46.513324+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9d00f6c2-3f51-4f72-9f55-a82f74ae9908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37958", "type": "seen", "source": "https://t.me/cvedetector/1270", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37958 - Meks Smart Author Widget Stored XSS\", \n \"Content\": \"CVE ID : CVE-2024-37958 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Meks Meks Smart Author Widget allows Stored XSS.This issue affects Meks Smart Author Widget: from n/a through 1.1.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:16:59.000000Z"} 2024-07-20T12:16:59+00:00 https://vulnerability.circl.lu/sighting/939bed99-b1e1-4b11-ab56-2c1f7f80b879/export 2026-06-28T10:21:46.513224+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "939bed99-b1e1-4b11-ab56-2c1f7f80b879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37957", "type": "seen", "source": "https://t.me/cvedetector/1271", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37957 - Bradmax Player Stored Cross-site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-37957 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bradmax Bradmax Player allows Stored XSS.This issue affects Bradmax Player: from n/a through 1.1.27. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:17:00.000000Z"} 2024-07-20T12:17:00+00:00 https://vulnerability.circl.lu/sighting/be99f632-cdb9-48fd-a03f-5542c07d5276/export 2026-06-28T10:21:46.513120+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "be99f632-cdb9-48fd-a03f-5542c07d5276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37955", "type": "seen", "source": "https://t.me/cvedetector/1272", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37955 - GutSlider GutSlider Stored Cross-site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-37955 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zakaria Binsaifullah GutSlider \u2013 All in One Block Slider allows Stored XSS.This issue affects GutSlider \u2013 All in One Block Slider: from n/a through 2.7.3. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:17:04.000000Z"} 2024-07-20T12:17:04+00:00 https://vulnerability.circl.lu/sighting/972b2888-ab45-4631-a992-9fc9cf0d018f/export 2026-06-28T10:21:46.513018+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "972b2888-ab45-4631-a992-9fc9cf0d018f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37954", "type": "seen", "source": "https://t.me/cvedetector/1274", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37954 - MarceloTorres Simple Responsive Slider Cross-site Scripting\", \n \"Content\": \"CVE ID : CVE-2024-37954 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:17:05.000000Z"} 2024-07-20T12:17:05+00:00 https://vulnerability.circl.lu/sighting/23c99078-541d-4eb1-a8aa-b280b4b08c22/export 2026-06-28T10:21:46.512911+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "23c99078-541d-4eb1-a8aa-b280b4b08c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37953", "type": "seen", "source": "https://t.me/cvedetector/1273", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37953 - MBE eShip Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-37953 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MBE Worldwide S.P.A. MBE eShip allows Reflected XSS.This issue affects MBE eShip: from n/a through 2.1.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:17:05.000000Z"} 2024-07-20T12:17:05+00:00 https://vulnerability.circl.lu/sighting/814952df-2415-48ab-9ee8-bc8af948fb6c/export 2026-06-28T10:21:46.512768+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "814952df-2415-48ab-9ee8-bc8af948fb6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37950", "type": "seen", "source": "https://t.me/cvedetector/1276", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37950 - CodexHelp Master Popups Stored XSS\", \n \"Content\": \"CVE ID : CVE-2024-37950 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodexHelp Master Popups allows Stored XSS.This issue affects Master Popups: from n/a through 1.0.3. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:17:07.000000Z"} 2024-07-20T12:17:07+00:00 https://vulnerability.circl.lu/sighting/e79d9fe6-e8ff-4af1-aa81-f64a784520bb/export 2026-06-28T10:21:46.509718+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e79d9fe6-e8ff-4af1-aa81-f64a784520bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37951", "type": "seen", "source": "https://t.me/cvedetector/1277", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-37951 - Elementor & Gutenberg Posts Blocks Stored XSS\", \n \"Content\": \"CVE ID : CVE-2024-37951 \nPublished : July 20, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor alam Magical Posts Display \u2013 Elementor & Gutenberg Posts Blocks allows Stored XSS.This issue affects Magical Posts Display \u2013 Elementor & Gutenberg Posts Blocks: from n/a through 1.2.38. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T12:17:11.000000Z"} 2024-07-20T12:17:11+00:00