EUVD-2024-22544

Malicious code in bioql PyPI...

EUVD-2023-28299

Malicious code in bioql PyPI...

EUVD-2025-32189

Malicious code in bioql PyPI...

EUVD-2023-28291

Malicious code in bioql PyPI...

EUVD-2022-52920

Malicious code in bioql PyPI...

EUVD-2025-28591

Malicious code in bioql PyPI...

EUVD-2025-27194

Malicious code in bioql PyPI...

EUVD-2023-28943

Malicious code in bioql PyPI...

EUVD-2023-34204

Malicious code in bioql PyPI...

EUVD-2022-48512

Malicious code in bioql PyPI...

EUVD-2025-6531

Malicious code in bioql PyPI...

EUVD-2025-28887

Malicious code in bioql PyPI...

EUVD-2025-26187

Malicious code in bioql PyPI...

EUVD-2025-26182

Malicious code in bioql PyPI...

EUVD-2025-31564

Malicious code in bioql PyPI...

CVE-2025-56154

htmly v3.0.8 is vulnerable to Cross Site Scripting XSS in the /author/:name endpoint of the affected application. The name parameter is not properly sanitized before being reflected in the HTML response, allowing attackers to inject arbitrary JavaScript payloads...

CVE-2025-40992

Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint '/sociopro/profile/updateprofile', affecting to 'name' parameter via POST. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and...

CVE-2025-40992

CVE-2025-40992 is a Stored XSS vulnerability in Creativeitem Sociopro, affecting the /sociopro/profile/update_profile endpoint where the POSTed name parameter is insufficiently validated. Attackers could inject script that may be executed in an authenticated user’s context, with potential cookie/...

PT-2025-40339

Name of the Vulnerable Software and Affected Versions Creativeitem Sociopro affected versions not specified Description A stored cross-site scripting XSS issue exists in Creativeitem Sociopro due to insufficient validation of user-supplied data. The issue is present in the /sociopro/profile/updat...

PT-2025-40403

Name of the Vulnerable Software and Affected Versions htmly version 3.0.8 Description The application is susceptible to Cross Site Scripting XSS due to insufficient sanitization of user-supplied input. Specifically, the /author/:name API endpoint does not properly sanitize the name parameter befo...