EUVD-2024-54848

Malicious code in bioql PyPI...

EUVD-2023-27874

Malicious code in bioql PyPI...

EUVD-2022-48587

Malicious code in bioql PyPI...

EUVD-2024-53739

Malicious code in bioql PyPI...

EUVD-2025-7206

Malicious code in bioql PyPI...

EUVD-2024-30385

Malicious code in bioql PyPI...

EUVD-2022-7212

Malicious code in bioql PyPI...

EUVD-2024-3332

Malicious code in bioql PyPI...

EUVD-2025-6977

Malicious code in bioql PyPI...

EUVD-2022-2341

Malicious code in bioql PyPI...

EUVD-2022-45197

Malicious code in bioql PyPI...

EUVD-2025-13411

Malicious code in bioql PyPI...

EUVD-2024-52126

Malicious code in bioql PyPI...

EUVD-2022-45205

Malicious code in bioql PyPI...

EUVD-2023-40285

Malicious code in bioql PyPI...

EUVD-2024-16872

Malicious code in bioql PyPI...

EUVD-2022-4114

Malicious code in bioql PyPI...

PT-2025-40480

Name of the Vulnerable Software and Affected Versions Easy Elementor Addons versions prior to 2.2.8 Description The Easy Elementor Addons plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping in several widget...

CVE-2025-40989

CVE-2025-40989 describes a stored cross-site scripting vulnerability in Ekushey CRM v5.0 (Creativeitem) caused by insufficient validation of user input in the POST endpoint dealing with the applicant’s message, specifically the API path that includes the message parameter. The affected component ...

CVE-2025-6941

CVE-2025-6941 is a stored XSS in the WordPress plugin LatePoint (Calendar Booking Plugin for Appointments and Events). The issue arises from insufficient input sanitization/escaping in the id parameter of the latepoint_resources shortcode, affecting all versions up to and including 5.1.94. Exploi...