EUVD-2025-2677

Malicious code in bioql PyPI...

EUVD-2023-46196

Malicious code in bioql PyPI...

EUVD-2023-54756

Malicious code in bioql PyPI...

EUVD-2021-8849

Malicious code in bioql PyPI...

EUVD-2025-12391

Malicious code in bioql PyPI...

EUVD-2025-28578

Malicious code in bioql PyPI...

EUVD-2025-6618

Malicious code in bioql PyPI...

EUVD-2024-40683

Malicious code in bioql PyPI...

EUVD-2024-34985

Malicious code in bioql PyPI...

EUVD-2024-52249

Malicious code in bioql PyPI...

EUVD-2024-46190

Malicious code in bioql PyPI...

EUVD-2024-42518

Malicious code in bioql PyPI...

EUVD-2024-46162

Malicious code in bioql PyPI...

CVE-2025-9946

The LockerPress – WordPress Security Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Name text field. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting specially crafted input. Details Cross-site scripting or XSS is a code vulnerability that occurs when...

PT-2025-39175

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description An authenticated stored cross-site scripting XSS issue exists because of insufficient validation of user-provided input when uploading API documents within the Publisher portal. An...

Cross-site Scripting (XSS)

UnoPim is vulnerable to a stored cross-site scripting XSS vulnerability. The vulnerability is due to a MIME/sanitizer bypass in SVG files, which allows attackers to upload a specially crafted SVG image containing malicious script...

Halo 安全漏洞

Halo is a powerful and easy-to-use open source website builder from Halo Open Source. A security vulnerability exists in Halo v2.20.17 and earlier versions, which originates from cross-site scripting and could lead to the execution of malicious scripts...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the dataAddonlayouts and dataAddonlayoutsexcept parameters in the /apprain/developer/addons/update/dialogs process. An attacker can execute arbitrary scripts in the context of a user's browser by submitting...

CVE-2025-56236

FormCms v0.5.5 contains a stored cross-site scripting XSS vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged user accesses the file, the script executes in their browser...