17998 matches found
EUVD-2025-32559
A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...
CVE-2025-56382
A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...
PT-2025-40921
Name of the Vulnerable Software and Affected Versions LionCoders SalePro POS version 5.4.8 Description A stored Cross-site scripting XSS issue exists within the Customer Management Module. An authenticated attacker can inject arbitrary web script or HTML through the Customer Name parameter during...
CVE-2025-56382: Improper Neutralization of Input During Web Page Generation
A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...
CVE-2025-9875
The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
CVE-2025-8776
The Epic Bootstrap Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘icol’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2025-10383: Improper Neutralization of Input During Web Page Generation
The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...
EUVD-2025-24885
Malicious code in bioql PyPI...
EUVD-2025-25130
Malicious code in bioql PyPI...
EUVD-2025-25315
Malicious code in bioql PyPI...
EUVD-2025-25285
Malicious code in bioql PyPI...
EUVD-2025-25351
Malicious code in bioql PyPI...
EUVD-2025-25383
Malicious code in bioql PyPI...
EUVD-2025-25472
Malicious code in bioql PyPI...
EUVD-2025-25490
Malicious code in bioql PyPI...
EUVD-2025-25905
Malicious code in bioql PyPI...
EUVD-2025-25896
Malicious code in bioql PyPI...
EUVD-2025-26063
Malicious code in bioql PyPI...