EUVD-2022-33410

Malicious code in bioql PyPI...

EUVD-2022-48125

Malicious code in bioql PyPI...

EUVD-2022-49307

Malicious code in bioql PyPI...

EUVD-2024-22554

Malicious code in bioql PyPI...

EUVD-2024-50438

Malicious code in bioql PyPI...

EUVD-2023-2571

Malicious code in bioql PyPI...

EUVD-2024-47789

Malicious code in bioql PyPI...

EUVD-2024-46641

Malicious code in bioql PyPI...

EUVD-2024-47915

Malicious code in bioql PyPI...

EUVD-2024-37876

Malicious code in bioql PyPI...

EUVD-2022-46212

Malicious code in bioql PyPI...

EUVD-2023-41056

Malicious code in bioql PyPI...

EUVD-2024-49431

Malicious code in bioql PyPI...

PT-2025-32622 · WordPress · Simple Responsive Slider

Name of the Vulnerable Software and Affected Versions: Simple Responsive Slider versions prior to 2.0 Description: The Simple Responsive Slider plugin for WordPress is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated...

CVE-2025-51629

A cross-site scripting XSS vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Temp parameter...

PT-2025-32293 · Unknown · Agenzia Impresa Eccobook

Name of the Vulnerable Software and Affected Versions: Agenzia Impresa Eccobook version 2.81.1 Description: A cross-site scripting XSS vulnerability exists in the PdfViewer component. This allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Temp...

CVE-2025-51534

A cross-site scripting XSS vulnerability in Austrian Archaeological Institute AI OpenAtlas v8.11.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name field...

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

CVE-2025-6692

The YouTube Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘instance’ parameter in all versions up to, and including, 10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2025-50481

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...