EUVD-2025-35974

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrestaProject Attesa Extra attesa-extra allows Stored XSS.This issue affects Attesa Extra: from n/a through = 1.4.5...

PT-2025-43843

Name of the Vulnerable Software and Affected Versions CrestaProject Attesa Extra versions through 1.4.5 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS issue. This specific instance is a Stored XSS,...

EUVD-2024-45481

Malicious code in bioql PyPI...

CVE-2024-51680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrestaProject Cresta Addons for Elementor cresta-addons-for-elementor allows Stored XSS.This issue affects Cresta Addons for Elementor: from n/a through = 1.0.9...