EUVD-2024-32499

Malicious code in bioql PyPI...

EUVD-2025-9207

Malicious code in bioql PyPI...

EUVD-2025-8570

Malicious code in bioql PyPI...

EUVD-2025-6635

Malicious code in bioql PyPI...

EUVD-2024-2711

Malicious code in bioql PyPI...

EUVD-2025-29005

Malicious code in bioql PyPI...

EUVD-2024-29123

Malicious code in bioql PyPI...

EUVD-2022-5599

Malicious code in bioql PyPI...

EUVD-2022-2450

Malicious code in bioql PyPI...

EUVD-2024-26884

Malicious code in bioql PyPI...

EUVD-2022-1294

Malicious code in bioql PyPI...

EUVD-2025-25422

Malicious code in bioql PyPI...

EUVD-2023-1359

Malicious code in bioql PyPI...

EUVD-2024-45795

Malicious code in bioql PyPI...

EUVD-2025-31648

Malicious code in bioql PyPI...

EUVD-2025-3114

Malicious code in bioql PyPI...

CVE-2025-43811

Multiple stored cross-site scripting XSS vulnerability in the related asset selector in Liferay Portal 7.4.3.50 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.7, and 7.4 update 50 through update 92 allows remote authenticated attackers to inject arbitrar...

Liferay Portal vulnerable to cross-site scripting in the related asset selector

Multiple stored cross-site scripting XSS vulnerability in the related asset selector in Liferay Portal 7.4.3.50 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.7, and 7.4 update 50 through update 92 allows remote authenticated attackers to inject arbitrar...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the related asset selector. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting crafted payloads into the First Name, Middle Name, or Last Name text fields. Details Cross-sit...

GHSA-2856-XF2F-6VRF Liferay Portal vulnerable to cross-site scripting in the related asset selector

Multiple stored cross-site scripting XSS vulnerability in the related asset selector in Liferay Portal 7.4.3.50 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.7, and 7.4 update 50 through update 92 allows remote authenticated attackers to inject arbitrar...