16 matches found
EUVD-2025-8355
Malicious code in bioql PyPI...
EUVD-2025-28649
Malicious code in bioql PyPI...
CVE-2025-57890
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through = 3.2.0...
CVE-2025-57890
CVE-2025-57890: A stored XSS in WordPress Sessions Plugin (versions up to 3.2.0) arises from improper input neutralization during web page generation. Affected: Sessions plugin total versions through 3.2.0 (no vendor/version specifics beyond 3.2.0). Impact is listed as low in confidentiality, int...
PT-2025-34354 · Unknown · Pierre Lannoy Sessions
Name of the Vulnerable Software and Affected Versions: Pierre Lannoy Sessions versions through 3.2.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting XSS. Recommendations: Update Pierre Lannoy...
CVE-2025-57890: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through = 3.2.0...
CVE-2025-30826
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy IP Locator ip-locator allows DOM-Based XSS.This issue affects IP Locator: from n/a through = 4.1.0...
CVE-2025-30826: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy IP Locator ip-locator allows DOM-Based XSS.This issue affects IP Locator: from n/a through = 4.1.0...
WordPress plugin Pierre Lannoy IP Locator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2024-56010
CVE-2024-56010 is a reflected XSS in Device Detector (Pierre Lannoy / PerfOps One) that affects Device Detector versions up to 4.2.0. Root cause: improper neutralization of input during web page generation, enabling reflected script execution via the id parameter. Impact per available docs: poten...
CVE-2024-56010: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Device Detector device-detector allows Reflected XSS.This issue affects Device Detector: from n/a through = 4.2.0...
CVE-2024-30245: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pierre Lannoy DecaLog decalog.This issue affects DecaLog: from n/a through = 3.9.0...
CVE-2023-27444
Cross-Site Request Forgery CSRF vulnerability in Pierre Lannoy / PerfOps One DecaLog plugin = 3.7.0 versions...
CVE-2023-27444
Cross-Site Request Forgery CSRF vulnerability in Pierre Lannoy / PerfOps One DecaLog plugin = 3.7.0 versions...
