7612 matches found
EUVD-2024-19232
Malicious code in bioql PyPI...
EUVD-2022-33958
Malicious code in bioql PyPI...
EUVD-2023-30905
Malicious code in bioql PyPI...
EUVD-2025-6574
Malicious code in bioql PyPI...
EUVD-2024-2247
Malicious code in bioql PyPI...
EUVD-2025-25452
Malicious code in bioql PyPI...
EUVD-2022-31814
Malicious code in bioql PyPI...
EUVD-2025-18998
Malicious code in bioql PyPI...
EUVD-2022-36068
Malicious code in bioql PyPI...
EUVD-2023-41702
Malicious code in bioql PyPI...
EUVD-2021-8098
Malicious code in bioql PyPI...
EUVD-2021-9947
Malicious code in bioql PyPI...
EUVD-2022-6684
Malicious code in bioql PyPI...
EUVD-2025-0206
Malicious code in bioql PyPI...
EUVD-2025-4747
Malicious code in bioql PyPI...
WordPress plugin Fintelligence Calculator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Fintelligence Calculator plugin, which stems from a lack of valid filtering and escaping of the...
CVE-2025-56379
A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...
WordPress plugin BP Direct Menus 跨站脚本漏洞
WordPress BP Direct Menus plugin is a menu management plugin for WordPress, which is mainly used to realize the quick jump function of menu items. WordPress BP Direct Menus plugin has a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of the bpdmlogi...
CVE-2025-10490
The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2025-8906
The Widgets for Tiktok Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trustindex-feed' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...