461 matches found
CVE-2025-59035 Indico vulnerable to Cross-Site Scripting via LaTeX math code
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to version 3.3.8, there is a Cross-Site-Scripting vulnerability when rendering LaTeX math code in contribution or abstract descriptions. Users should to update to Indico 3.3.8 as...
CVE-2025-59035
CVE-2025-59035 — Indico XSS via LaTeX math rendering : Multiple sources (NVD, Red Hat, OSV, GHSA advisories, Snyk) confirm a Cross-Site Scripting vulnerability in Indico prior to version 3.3.8, triggered when rendering LaTeX math code in contribution or abstract descriptions. A fixed release is I...
Indico 跨站脚本漏洞
Indico is a feature-rich event management system from Indico Open Source. A cross-site scripting vulnerability exists in Indico versions prior to 3.3.8 that stems from a cross-site scripting vulnerability when rendering LaTeX math code...
PT-2025-37075
Name of the Vulnerable Software and Affected Versions: Indico versions prior to 3.3.8 Description: Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. A Cross-Site-Scripting issue exists when rendering LaTeX math code in contribution or...
CVE-2025-58860
Cross-Site Request Forgery CSRF vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue affects Enable Latex: from n/a through = 1.2.16...
CVE-2025-58860
Cross-Site Request Forgery CSRF vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue affects Enable Latex: from n/a through = 1.2.16...
CVE-2025-58860 WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue affects Enable Latex: from n/a through = 1.2.16...
CVE-2025-58860 WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue affects Enable Latex: from n/a through = 1.2.16...
CVE-2025-58860
CVE-2025-58860 — WordPress Enable Latex CSRF leading to Stored XSS Affected software: KaizenCoders Enable Latex WordPress plugin (versions up to and including 1.2.16). What is affected and how: A Cross-Site Request Forgery (CSRF) vulnerability exists in Enable Latex that can lead to Stored Cross-...
WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Enable Latex versions = 1.2.16...
PT-2025-36199
Name of the Vulnerable Software and Affected Versions: KaizenCoders Enable Latex versions n/a through 1.2.16 Description: A Cross-Site Request Forgery CSRF vulnerability exists in KaizenCoders Enable Latex, which can also lead to Stored Cross-Site Scripting XSS. Recommendations: Update KaizenCode...
WordPress plugin Enable Latex 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
Inclusion of Functionality from Untrusted Control Sphere
Overview Affected versions of this package are vulnerable to Inclusion of Functionality from Untrusted Control Sphere due to incomplete LaTeX sanitization that fails to block the verbatim package. The Latex handling module overlooks the verbatim package during sanitization, allowing specially...
Incomplete List of Disallowed Inputs
Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs due to a LaTeX blocklist bypass in the LaTeX processing functionality. The LaTeX module fails to enforce its blocklist properly, allowing specially crafted malicious flashcards to create arbitrary...
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
...
Linux Distros Unpatched Vulnerability : CVE-2021-40694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account. CVE-2021-40694...
Malicious code in test-mlw1-could-latex-solen-teddy (npm)
The package test-mlw1-could-latex-solen-teddy was found to contain malicious code...
Malicious code in @malware-test-could-latex-solen-teddy/test-mlw3-could-latex-solen-teddy (npm)
The package @malware-test-could-latex-solen-teddy/test-mlw3-could-latex-solen-teddy was found to contain malicious code...
