EUVD-2025-8771

Malicious code in bioql PyPI...

CVE-2025-40652

Stored Cross-Site Scripting XSS vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application, which are permanently stored on the server. The malicious scripts are executed in the browser of any user visiting the affected page withou...

CVE-2025-40652

Stored Cross-Site Scripting XSS vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application, which are permanently stored on the server. The malicious scripts are executed in the browser of any user visiting the affected page withou...

CVE-2025-40652

CVE-2025-40652 describes a Stored Cross-Site Scripting (XSS) vulnerability in the CoverManager booking software. The affected component is the CoverManager booking system; the root cause is described as storing malicious scripts on the server, which are then executed in the browser of any visitin...

CVE-2025-40652 Cross-Site Scripting (XSS) in CoverManager

Stored Cross-Site Scripting XSS vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application, which are permanently stored on the server. The malicious scripts are executed in the browser of any user visiting the affected page withou...

CVE-2025-40652 Cross-Site Scripting (XSS) in CoverManager

Stored Cross-Site Scripting XSS vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application, which are permanently stored on the server. The malicious scripts are executed in the browser of any user visiting the affected page withou...

PT-2025-22894 · Unknown · Covermanager

Name of the Vulnerable Software and Affected Versions: CoverManager affected versions not specified Description: The issue is a Stored Cross-Site Scripting XSS vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application, which are...

CVE-2025-40652: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application, which are permanently stored on the server. The malicious scripts are executed in the browser of any user visiting the affected page withou...

CoverManager 跨站脚本漏洞

CoverManager is an online platform from CoverManager, Inc. that specializes in providing solutions for the hospitality industry. A cross-site scripting vulnerability exists in CoverManager that originates from stored cross-site scripting and could lead to information disclosure or execution of...

CVE-2025-31620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in carperfer CoverManager covermanager allows Stored XSS.This issue affects CoverManager: from n/a through = 0.0.1...

WordPress CoverManager plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin CoverManager versions = 0.0.1...

CVE-2025-31620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in carperfer CoverManager covermanager allows Stored XSS.This issue affects CoverManager: from n/a through = 0.0.1...

CVE-2025-31620

CVE-2025-31620 : Stored XSS in CoverManager WordPress plugin (v0.0.1 and earlier). Root cause: improper neutralization of input during web page generation. Affected: CoverManager (versions n/a–0.0.1). Access required: authenticated (Contributor+). Impact: stored cross-site scripting; exact exploi...

CVE-2025-31620 WordPress CoverManager plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in carperfer CoverManager covermanager allows Stored XSS.This issue affects CoverManager: from n/a through = 0.0.1...

CVE-2025-31620 WordPress CoverManager plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in carperfer CoverManager allows Stored XSS. This issue affects CoverManager: from n/a through 0.0.1...

CVE-2025-31620: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in carperfer CoverManager covermanager allows Stored XSS.This issue affects CoverManager: from n/a through = 0.0.1...

WordPress plugin CoverManager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-13764

Name of the Vulnerable Software and Affected Versions Carperfer CoverManager versions 0.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...