Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-16016

Malicious code in bioql PyPI...

4.8CVSS6.6AI score0.00167EPSS
Exploits0References2
OSV
OSV
added 2025/05/21 5:15 p.m.0 views

CVE-2025-4415

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

4.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/05/21 5:15 p.m.11 views

CVE-2025-4415

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

4.8CVSS0.00167EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/21 4:21 p.m.6 views

CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

5.1AI score0.00167EPSS
Exploits0References1
CVE
CVE
added 2025/05/21 4:21 p.m.43 views

CVE-2025-4415

CVE-2025-4415 affects the Drupal Piwik PRO module prior to 1.3.2. The issue is described as Improper Neutralization of Input During Web Page Generation, enabling Cross-Site Scripting (XSS). Affected versions are 0.0.0 through 1.3.2, with public references indicating an authenticated XSS concern (...

4.8CVSS5AI score0.00167EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/21 4:21 p.m.15 views

CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

0.00167EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/21 12:0 a.m.4 views

PT-2025-22385 · Piwik Pro · Piwik Pro

Name of the Vulnerable Software and Affected Versions: Piwik PRO versions 0.0.0 through 1.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an attacker to perform Cross-Site Scripting XSS...

4.8CVSS5.6AI score0.00167EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/05/21 12:0 a.m.2 views

Drupal Piwik PRO 安全漏洞

Drupal Piwik PRO is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal Piwik PRO versions prior to 1.3.2 that stems from improper input neutralization and could lead to a cross-site scripting attack...

4.8CVSS6AI score0.00167EPSS
Exploits0References1
OSV
OSV
added 2025/05/14 6:4 p.m.3 views

DRUPAL-CONTRIB-2025-058

This module enables you to add the Piwik Pro web statistics tracking system to your website. The module does not check the JS code that is loaded on the website. So a user with the "Administer Piwik Pro" permission could configure the module to load JS from a malicious website. This vulnerability...

4.8CVSS6.8AI score0.00167EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/05/14 12:0 a.m.6 views

Drupal Piwik PRO module < 1.3.2 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Piwik PRO versions 1.3.2...

4.8CVSS6.1AI score0.00167EPSS
Exploits0References1Affected Software1
Drupal
Drupal
added 2025/05/14 12:0 a.m.7 views

Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

This module enables you to add the Piwik Pro web statistics tracking system to your website. The module does not check the JS code that is loaded on the website. So a user with the "Administer Piwik Pro" permission could configure the module to load JS from a malicious website. This vulnerability...

4.8CVSS6.7AI score0.00167EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:8 p.m.3 views

Malicious code in piwik-pro-angular-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79068cbf8199cbc4c530a577a4934b5e4c0fa657f5c84ef801c777fd77150c36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:8 p.m.6 views

MAL-2022-5346 Malicious code in piwik-pro-angular-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79068cbf8199cbc4c530a577a4934b5e4c0fa657f5c84ef801c777fd77150c36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Rows per page
Query Builder