670 matches found
EUVD-2023-30036
Malicious code in bioql PyPI...
EUVD-2022-5502
Malicious code in bioql PyPI...
EUVD-2021-8063
Malicious code in bioql PyPI...
EUVD-2021-8204
Malicious code in bioql PyPI...
EUVD-2021-8286
Malicious code in bioql PyPI...
EUVD-2021-8182
Malicious code in bioql PyPI...
EUVD-2025-27131
Malicious code in bioql PyPI...
EUVD-2024-49417
Malicious code in bioql PyPI...
EUVD-2023-33180
Malicious code in bioql PyPI...
EUVD-2021-8199
Malicious code in bioql PyPI...
EUVD-2022-4228
Malicious code in bioql PyPI...
EUVD-2022-5756
Malicious code in bioql PyPI...
EUVD-2021-28078
Malicious code in bioql PyPI...
CVE-2025-8906
The Widgets for Tiktok Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trustindex-feed' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9879
The Spotify Embed Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotify' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-8316
The Certifica WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘evento’ parameter in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
Liferay Portal和Liferay DXP 跨站脚本漏洞
Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...
CVE-2025-9061
The Wilmer Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-leve...
CVE-2024-53287
Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in VPN Setting functionality in Synology Router Manager SRM before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified...
CVE-2024-53287
Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in VPN Setting functionality in Synology Router Manager SRM before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified...