MAL-2025-36096 Malicious code in test-mlw2-reach-pests-quill-acted (npm)

The package test-mlw2-reach-pests-quill-acted was found to contain malicious code...

MAL-2025-23544 Malicious code in jade-3wr62-0nu1x-quill-project (npm)

The package jade-3wr62-0nu1x-quill-project was found to contain malicious code...

MAL-2025-31331 Malicious code in quill-zebra-hpc995-project (npm)

The package quill-zebra-hpc995-project was found to contain malicious code...

MAL-2025-36926 Malicious code in tiger-quill-com417-project (npm)

The package tiger-quill-com417-project was found to contain malicious code...

MAL-2025-23546 Malicious code in jade-9ay7e-z69th-quill-project (npm)

The package jade-9ay7e-z69th-quill-project was found to contain malicious code...

MAL-2025-29008 Malicious code in pebble-quill-dda298-project (npm)

The package pebble-quill-dda298-project was found to contain malicious code...

MAL-2025-40787 Malicious code in zebra-quill-gkk089-project (npm)

The package zebra-quill-gkk089-project was found to contain malicious code...

MAL-2025-40939 Malicious code in zeppelin-quill-gho636-project (npm)

The package zeppelin-quill-gho636-project was found to contain malicious code...

MAL-2025-31316 Malicious code in quill-jacket-mkd652-project (npm)

The package quill-jacket-mkd652-project was found to contain malicious code...

MAL-2025-19073 Malicious code in eagle-quill-tsk027-project (npm)

The package eagle-quill-tsk027-project was found to contain malicious code...

MAL-2025-20768 Malicious code in forest-quill-znf368-project (npm)

The package forest-quill-znf368-project was found to contain malicious code...

CVE-2024-47393

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohamed Magdy Quill Forms quillforms allows Stored XSS.This issue affects Quill Forms: from n/a through = 3.7.0...

CVE-2024-11826

The Quill Forms | The Best Typeform Alternative | Create Conversational Multi Step Form, Survey, Quiz, Cost Estimation or Donation Form on WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'quillforms-popup' shortcode in all versions up to, and including...

CVE-2023-26149

Versions of the package quill-mention before 4.0.0 are vulnerable to Cross-site Scripting XSS due to improper user-input sanitization, via the renderList function. Note: If the mentions list is sourced from unsafe user-sourced data, this might allow an injection attack when a Quill user hits @...

CVE-2023-46610

Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quill Forms: from n/a through = 3.3.0...

CVE-2021-3163

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload a crafted onloadstart attribute of an IMG element in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended...

Malicious code in cs-quill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31ebe1b6ed073309f7160a88b8da3710fdb262628438f41a873de1302f772b32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1089 Malicious code in cs-quill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31ebe1b6ed073309f7160a88b8da3710fdb262628438f41a873de1302f772b32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Quill Forms plugin <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Quill Forms versions = 3.10.0...

CVE-2024-11826

The Quill Forms | The Best Typeform Alternative | Create Conversational Multi Step Form, Survey, Quiz, Cost Estimation or Donation Form on WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'quillforms-popup' shortcode in all versions up to, and including...