EUVD-2022-5756

Malicious code in bioql PyPI...

EUVD-2021-8063

Malicious code in bioql PyPI...

EUVD-2023-30036

Malicious code in bioql PyPI...

EUVD-2021-8286

Malicious code in bioql PyPI...

EUVD-2022-5502

Malicious code in bioql PyPI...

EUVD-2023-33180

Malicious code in bioql PyPI...

EUVD-2021-8182

Malicious code in bioql PyPI...

EUVD-2023-36867

Malicious code in bioql PyPI...

EUVD-2021-28078

Malicious code in bioql PyPI...

EUVD-2024-48944

Malicious code in bioql PyPI...

EUVD-2024-49417

Malicious code in bioql PyPI...

EUVD-2022-4228

Malicious code in bioql PyPI...

EUVD-2021-8098

Malicious code in bioql PyPI...

EUVD-2021-8101

Malicious code in bioql PyPI...

EUVD-2024-50191

Malicious code in bioql PyPI...

CVE-2025-8906

The Widgets for Tiktok Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trustindex-feed' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9879

The Spotify Embed Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotify' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-8316

The Certifica WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘evento’ parameter in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

CVE-2025-9061

The Wilmer Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-leve...