EUVD-2025-27709

Malicious code in bioql PyPI...

EUVD-2025-31300

Malicious code in bioql PyPI...

EUVD-2022-5871

Malicious code in bioql PyPI...

EUVD-2022-6088

Malicious code in bioql PyPI...

EUVD-2025-0046

Malicious code in bioql PyPI...

EUVD-2025-3977

Malicious code in bioql PyPI...

EUVD-2022-38723

Malicious code in bioql PyPI...

EUVD-2022-41334

Malicious code in bioql PyPI...

PT-2025-39547

Name of the Vulnerable Software and Affected Versions 8theme XStore versions through 9.5.3 Description The software contains a flaw related to improper handling of script-related HTML tags on a web page, potentially leading to code injection. This issue is identified as a Basic Cross-Site Scripti...

WordPress plugin XStore has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

WordPress plugin AWP Classifieds has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

GLPI Request Inventory Script Injection Code Execution

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the failure to remove script-related HTML tags from the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

PHP TCPDF XSS

The vulnerability of the PHP library TCPDF is related to the lack of measures taken to eliminate script-related HTML tags on web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

Linux Distros Unpatched Vulnerability : CVE-2022-39371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features,...

IntelliJ IDEA XSS

The vulnerability of the IntelliJ IDEA development environment is related to the failure to remove script-related tags from web pages. Exploiting this vulnerability can allow an attacker to carry out XSS attacks using a specially created link...

Apache Superset XSS

The vulnerability of the Apache Superset data visualization software is related to the failure to take measures to neutralize script-related tags on web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

IBM Cloud Pak System HTML Injection

The vulnerability of the software for deploying and managing cloud enterprise systems based on IBM Cloud Pak System is related to the failure to remove scipt-related HTML tags from web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary HTML code remotely...

CVE-2025-54698

CVE-2025-54698 concerns the WordPress Classified Listing plugin (RadiusTheme Classified Listing) up to version 5.0.0, with a vulnerability described as improper neutralization of script-related HTML tags in web pages, enabling content injection that can lead to basic XSS/Code Injection. Connected...

CVE-2025-27358

CVE-2025-27358 is a Content Injection (XSS) vulnerability affecting the WordPress plugin “Frontend File Manager” up to version 23.2. The issue arises from improper neutralization of script-related HTML tags in the web page, enabling code injection. Public details in the initial data indicate affe...

CVE-2023-48763

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Crocoblock JetFormBuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.1.4...