CVE-2026-8790

The Football Pool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the shouttext POST parameter of the Shoutbox widget in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. When a shoutbox form submission fails the nonce...

CVE-2026-8790 Football Pool <= 2.13.4 - Authenticated (Subscriber+) Reflected Cross-Site Scripting

The Football Pool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the shouttext POST parameter of the Shoutbox widget in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. When a shoutbox form submission fails the nonce...

EUVD-2026-53040

The Football Pool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the shouttext POST parameter of the Shoutbox widget in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. When a shoutbox form submission fails the nonce...

CVE-2026-8790

The Football Pool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the shouttext POST parameter of the Shoutbox widget in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. When a shoutbox form submission fails the nonce...

CVE-2026-8790

CVE-2026-8790 affects the Football Pool WordPress plugin up to version 2.13.4. The issue is a Reflected Cross-Site Scripting in the Shoutbox widget, where the raw POST value of the shouttext parameter is echoed into a textarea via printf('%s', ...) without HTML escaping when a nonce check fails, ...

CVE-2017-18524

The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues...

EUVD-2017-9640

Malware in sbrugna...

EUVD-2025-19357

Malicious code in bioql PyPI...

EUVD-2025-27400

Malicious code in bioql PyPI...

EUVD-2025-28575

Malicious code in bioql PyPI...

EUVD-2024-40066

Malicious code in bioql PyPI...

EUVD-2025-8409

Malicious code in bioql PyPI...

EUVD-2024-26796

Malicious code in bioql PyPI...

EUVD-2024-40057

Malicious code in bioql PyPI...

CVE-2025-58987

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through = 2.12.6...

CVE-2025-58987

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through = 2.12.6...

WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Football Pool versions = 2.12.6...

CVE-2025-58987 WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through = 2.12.6...

CVE-2025-58987

CVE-2025-58987 maps to the WordPress Football Pool plugin vulnerability: stored Cross‑Site Scripting in AntoineH Football Pool up to version 2.12.6. The issue arises from improper input neutralization during web page generation, enabling stored XSS (authenticated attackers with at least Subscribe...

CVE-2025-58987 WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AntoineH Football Pool allows Stored XSS. This issue affects Football Pool: from n/a through 2.12.6...