EUVD-2022-3854

Malicious code in bioql PyPI...

EUVD-2023-29704

Malicious code in bioql PyPI...

EUVD-2023-35538

Malicious code in bioql PyPI...

EUVD-2023-58672

Malicious code in bioql PyPI...

EUVD-2023-58668

Malicious code in bioql PyPI...

EUVD-2023-58664

Malicious code in bioql PyPI...

EUVD-2023-58663

Malicious code in bioql PyPI...

EUVD-2023-58671

Malicious code in bioql PyPI...

EUVD-2023-58666

Malicious code in bioql PyPI...

EUVD-2023-58661

Malicious code in bioql PyPI...

EUVD-2023-58660

Malicious code in bioql PyPI...

EUVD-2022-47573

Malicious code in bioql PyPI...

EUVD-2022-46993

Malicious code in bioql PyPI...

CVE-2025-41681

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content...

CVE-2025-41681: Improper Neutralization of Input During Web Page Generation

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content...

Ibexa RichText Field Type XSS vulnerabilities in back office

Impact This security advisory is a part of IBEXA-SA-2025-003, which resolves XSS vulnerabilities in several parts of the back office of Ibexa DXP. Back office access and varying levels of editing and management permissions are required to exploit these vulnerabilities. This typically means Editor...

Ibexa eZ Platform Admin UI XSS vulnerabilities in back office

Impact This security advisory is a part of IBEXA-SA-2025-003, which resolves XSS vulnerabilities in several parts of the back office of Ibexa DXP. Back office access and varying levels of editing and management permissions are required to exploit these vulnerabilities. This typically means Editor...

CVE-2023-30452

The MoroSystems EasyMind - Mind Maps plugin before 2.15.0 for Confluence allows persistent XSS when saving a Mind Map with the hyperlink parameter...

CVE-2023-30453

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

CVE-2023-25810

Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma status page allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability...