2746 matches found
CVE-2025-11764
CVE-2025-11764 affects the WordPress plugin Shortcodes Bootstrap (versions
CVE-2025-11764 Shortcodes Bootstrap <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-11764 Shortcodes Bootstrap <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-11764: Improper Neutralization of Input During Web Page Generation
The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...
PT-2025-47676
The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...
WordPress plugin Shortcodes Bootstrap 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Shortcodes Bootstrap plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Shortcodes Bootstrap versions = 1.1...
EUVD-2025-176963
Malicious code in proxima-farout-react-bootstrap-puppeteer npm...
Malicious code in titan-bootstrap-lynx-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6052c43f9808772f747f45034b0d8b51eecb153991ae94ad357a99ac6a1e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179646
Malicious code in command-react-bootstrap-neuromorphic-magellan npm...
EUVD-2025-179070
Malicious code in eridanus-react-bootstrap-telesto-yaml npm...
EUVD-2025-177111
Malicious code in polaris-octans-bootstrap-bootstrap npm...
EUVD-2025-176355
Malicious code in sirius-react-bootstrap-ignite-pegasus npm...
EUVD-2025-176974
Malicious code in protractor-nightwatch-schema-bootstrap npm...
EUVD-2025-177755
Malicious code in morgan-react-bootstrap-cz-conventional-changelog-helios npm...
EUVD-2025-176169
Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...
Malicious code in bootstrap-futurology-bootstrap-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b104189a74b27deed81a647b36a22f7fbca02dfd1483495bc1805ff2b673e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177872
Malicious code in metalsmith-xanthus-react-bootstrap-sequelize npm...
Malicious code in ophiuchus-bootstrap-perseus-airbnb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165a8447356cfc0b4e1e5b701577bcb27e3f4cdfad04226d333dcb610673e901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...