EUVD-2023-0891

Malicious code in bioql PyPI...

EUVD-2022-37169

Malicious code in bioql PyPI...

EUVD-2024-32659

Malicious code in bioql PyPI...

EUVD-2024-49823

Malicious code in bioql PyPI...

EUVD-2022-2978

Malicious code in bioql PyPI...

EUVD-2024-0096

Malicious code in bioql PyPI...

EUVD-2024-1267

Malicious code in bioql PyPI...

EUVD-2025-32300

Malicious code in bioql PyPI...

EUVD-2024-40455

Malicious code in bioql PyPI...

EUVD-2022-4198

Malicious code in bioql PyPI...

EUVD-2022-27265

Malicious code in bioql PyPI...

EUVD-2022-39059

Malicious code in bioql PyPI...

EUVD-2025-32297

Malicious code in bioql PyPI...

EUVD-2022-2239

Malicious code in bioql PyPI...

CVE-2025-60453

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the column management module, specifically in the app\system\column\admin\index.class.php component. The vulnerability allows attackers to upload malicious SVG files...

CVE-2025-60448

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...

CVE-2025-60448

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...

CVE-2025-56515

CVE-2025-56515 affects Fiora chat application 1.0.0. The issue is in the user avatar SVG upload: content is not validated, allowing SVGs with foreignObject, iframe elements and JavaScript event handlers (e.g., onmouseover) to be uploaded and stored. When rendered, these SVGs execute arbitrary Jav...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-59525

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG and via allowed , which can be chained to execute JavaScript whenever users view impacted content e.g., announcements. This can...