12 matches found
EUVD-2025-31072
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-31072
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the g...
CVE-2025-31072
creationtimestamp| type| source ---|---|--- 2025-07-16 12:26:38+00:00| seen| Telegram/Lpj2L0WmtIlhNWlj9SWtO5NcBygIzwdLAktf2LdwmDIoZfk...
CVE-2025-31072
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Ofiz - WordPress Business Consulting Theme ofiz allows Reflected XSS.This issue affects Ofiz - WordPress Business Consulting Theme: from n/a through = 2.0...
CVE-2025-31072 WordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Ofiz - WordPress Business Consulting Theme allows Reflected XSS. This issue affects Ofiz - WordPress Business Consulting Theme: from n/a through 2.0...
CVE-2025-31072 WordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Ofiz - WordPress Business Consulting Theme ofiz allows Reflected XSS.This issue affects Ofiz - WordPress Business Consulting Theme: from n/a through = 2.0...
CVE-2025-31072
CVE-2025-31072 is a reflected Cross-Site Scripting vulnerability in the Ofiz - WordPress Business Consulting Theme (designthemes) up to version 2.0. The issue stems from improper input neutralization during web page generation, enabling attacker-controlled input to be reflected in the page. The C...
CVE-2023-31072
creationtimestamp| type| source ---|---|--- 2023-08-17 18:37:27+00:00| seen| https://t.me/cibsecurity/68760...
CVE-2023-31072
CVE-2023-31072 : Unauthenticated Reflected XSS in the WordPress plugin Advanced Category Template (praveen goswami) ≤ 0.1. Root cause: inputs are not properly sanitised/escaped before output. Impact: potential script execution in admin-facing contexts; exploit requires no authentication but user ...
WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)
Software Advanced Category Template Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-31072 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID df74b4658f80 Credits minhtuanac...