EUVD-2021-15849

Malware in sbrugna...

EUVD-2021-15847

Malware in sbrugna...

EUVD-2019-7911

Malware in sbrugna...

EUVD-2022-2694

Malicious code in bioql PyPI...

EUVD-2022-48338

Malicious code in bioql PyPI...

EUVD-2023-53101

Malicious code in bioql PyPI...

EUVD-2023-35296

Malicious code in bioql PyPI...

EUVD-2022-46015

Malicious code in bioql PyPI...

EUVD-2023-43702

Malicious code in bioql PyPI...

EUVD-2022-39605

Malicious code in bioql PyPI...

EUVD-2025-12232

Malicious code in bioql PyPI...

EUVD-2023-33011

Malicious code in bioql PyPI...

EUVD-2022-40396

Malicious code in bioql PyPI...

EUVD-2022-28184

Malicious code in bioql PyPI...

CVE-2025-60142

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DaganLev Simple Meta Tags simple-meta-tags allows DOM-Based XSS.This issue affects Simple Meta Tags: from n/a through = 1.5...

PT-2025-33256 · WordPress · Easy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: hashthemes Easy Elementor Addons versions through 2.2.6 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update hashthemes Easy...

CVE-2024-10858

The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com...

CVE-2023-48115

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request...

CVE-2023-30958

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0...

CVE-2022-42960

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js...