5771 matches found
CVE-2025-12823: Improper Neutralization of Input During Web Page Generation
The CSV to SortTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csv' shortcode in all versions up to, and including, 4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...
WordPress Simple User Import Export plugin <= 1.1.7 - Authenticated (Admin+) CSV Injection vulnerability
Authenticated Admin+ CSV Injection vulnerability discovered by Ivan Cese in WordPress Plugin Simple User Import Export versions = 1.1.7...
EUVD-2025-179454
Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin npm...
EUVD-2025-175503
Malicious code in xenon-prettier-plugin-markdown-csv-barnard npm...
EUVD-2025-177899
Malicious code in mensa-subscription-antares-csv npm...
Malicious code in csv-helmet-dione-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13660b1e5cd8242126ed9b1d8d9e9fd3a9430c6c23281cb67541a8d90eb0873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179449
Malicious code in csv-puppeteer-phoenix-event npm...
EUVD-2025-179453
Malicious code in csv-envconfig-achernar-stratigraphy npm...
EUVD-2025-178749
Malicious code in gemini-csv-cryonics-castor npm...
EUVD-2025-179452
Malicious code in csv-helmet-dione-canopus npm...
Malicious code in csv-puppeteer-phoenix-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374bf3eeca6aa7f97f05cedd4268ceca21f16e8c36c450cb4fa2c17ac2ffd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176557
Malicious code in sagitta-protractor-taurus-csv npm...
EUVD-2025-179810
Malicious code in ceres-perseus-csv-nconf npm...
Malicious code in typeorm-csv-troposphere-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73547aa88679589280af7f97832cc643441c415a7b0c69aa00448db76023b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in csv-steganography-sadr-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576c9c5300d33eedfca84952fa6d232cca75ad84dbeb63ccde6da8ff03408c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189248 Malicious code in rimraf-quantum-csv-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9909070a68830c6d663c79812a272f46e552253bfb360b94ab3ec3234e687778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178169
Malicious code in kuiperbelt-taurus-csv-ceres npm...
EUVD-2025-175861
Malicious code in typeorm-csv-troposphere-socketio npm...