22 matches found
EUVD-2025-205726
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows DOM-Based XSS.This issue affects Web Directory Free: from n/a through = 1.7.12...
CVE-2025-69018: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows DOM-Based XSS.This issue affects Web Directory Free: from n/a through = 1.7.12...
PT-2025-53899
Name of the Vulnerable Software and Affected Versions Shamalli Web Directory Free versions through 1.7.12 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the injection of...
EUVD-2025-14793
Malicious code in bioql PyPI...
EUVD-2025-11750
Malicious code in bioql PyPI...
EUVD-2025-8095
Malicious code in bioql PyPI...
CVE-2025-39567
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a through = 1.7.8...
CVE-2025-39567
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a through = 1.7.8...
CVE-2025-39567: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a through = 1.7.8...
PT-2025-17184 · Unknown · Shamalli Web Directory Free
Name of the Vulnerable Software and Affected Versions: Shamalli Web Directory Free versions 1.7.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...
CVE-2025-30908
Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-30908
Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-30908
Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-30908
CVE-2025-30908 affects Web Directory Free (WordPress plugin)
PT-2025-14708 · Unknown · Shamalli Web Directory Free
Name of the Vulnerable Software and Affected Versions: Shamalli Web Directory Free versions 1.7.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.7.6 and earlier, update to a version that fixes this issu...
CVE-2025-30908: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-28904
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-28904
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-28904
CVE-2025-28904 affects the Web Directory Free WordPress plugin (= 1.7.6); the connected documents indicate a patch exists. No exploit details are provided in the documents.
PT-2025-12816
Name of the Vulnerable Software and Affected Versions Shamalli Web Directory Free versions 1.7.6 and earlier Description The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command, which allows Blind SQL Injection...