CVE-2025-62416 bagisto - Server Side Template Injection (SSTI) in Product Description

Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection SSTI due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privilege...

EUVD-2012-4141

Malware in sbrugna...

EUVD-2003-0298

Malware in sbrugna...

EUVD-2019-9493

Malware in sbrugna...

EUVD-2019-4946

Malware in sbrugna...

EUVD-2018-9716

Malware in sbrugna...

CVE-2025-8726

CVE-2025-8726 affects the WordPress plugin WP Photo Album Plus (versions up to and including 9.0.11.006). The vulnerability is a stored XSS in the wppa_user_upload function, exploitable by authenticated users with Subscriber+ privileges, allowing injection of scripts that run in victims’ browsers...

EUVD-2023-26617

Malicious code in bioql PyPI...

EUVD-2022-5276

Malicious code in bioql PyPI...

EUVD-2022-24631

Malicious code in bioql PyPI...

EUVD-2022-1818

Malicious code in bioql PyPI...

EUVD-2025-28517

Malicious code in bioql PyPI...

EUVD-2024-42372

Malicious code in bioql PyPI...

EUVD-2024-52930

Malicious code in bioql PyPI...

EUVD-2025-29018

Malicious code in bioql PyPI...

EUVD-2022-2392

Malicious code in bioql PyPI...

EUVD-2023-32414

Malicious code in bioql PyPI...

EUVD-2022-29919

Malicious code in bioql PyPI...

EUVD-2024-27676

Malicious code in bioql PyPI...

EUVD-2025-24601

Malicious code in bioql PyPI...