25893 matches found
The vulnerability of the soapcgi_main() function in the soap.cgi script of D-Link DIR-645 router software allows a attacker to execute arbitrary commands.
The vulnerability of the soapcgimain function in the soap.cgi script of D-Link DIR-645 router software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted...
CVE-2025-9859
The Fintelligence Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fintelligence-calculator' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2025-10383
The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...
CVE-2025-8726
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-8726
CVE-2025-8726 affects the WordPress plugin WP Photo Album Plus (versions up to and including 9.0.11.006). The vulnerability is a stored XSS in the wppa_user_upload function, exploitable by authenticated users with Subscriber+ privileges, allowing injection of scripts that run in victims’ browsers...
PT-2025-40625
Name of the Vulnerable Software and Affected Versions Trinity Audio – Text to Speech AI audio player versions prior to 5.20.2 Description The software is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows unauthenticated attackers t...
PT-2025-40623
Name of the Vulnerable Software and Affected Versions The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress versions prior to 27.0.3 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of...
Cross-site Scripting (XSS)
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Cross-site Scripting XSS via the chat logs, due to improper input sanitization. An attacker can access sensitive information or impersonate an administrator by injecting malicious HTML or scripts into chat...
EUVD-2024-49369
Malicious code in bioql PyPI...
EUVD-2025-23422
Malicious code in bioql PyPI...
EUVD-2024-38089
Malicious code in bioql PyPI...
EUVD-2024-50924
Malicious code in bioql PyPI...
EUVD-2024-27214
Malicious code in bioql PyPI...
EUVD-2022-51949
Malicious code in bioql PyPI...
EUVD-2023-46122
Malicious code in bioql PyPI...
EUVD-2024-49933
Malicious code in bioql PyPI...
EUVD-2024-50052
Malicious code in bioql PyPI...
EUVD-2021-28344
Malicious code in bioql PyPI...