21 matches found
EUVD-2025-205726
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows DOM-Based XSS.This issue affects Web Directory Free: from n/a through = 1.7.12...
CVE-2025-69018: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows DOM-Based XSS.This issue affects Web Directory Free: from n/a through = 1.7.12...
PT-2025-53899
Name of the Vulnerable Software and Affected Versions Shamalli Web Directory Free versions through 1.7.12 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the injection of...
EUVD-2025-14793
Malicious code in bioql PyPI...
EUVD-2025-11750
Malicious code in bioql PyPI...
EUVD-2025-8095
Malicious code in bioql PyPI...
CVE-2025-39567
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a through = 1.7.8...
CVE-2025-39567
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a through = 1.7.8...
PT-2025-17184 · Unknown · Shamalli Web Directory Free
Name of the Vulnerable Software and Affected Versions: Shamalli Web Directory Free versions 1.7.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...
CVE-2025-39567: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a through = 1.7.8...
CVE-2025-30908
Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-30908
Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-30908
Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-30908
CVE-2025-30908 affects Web Directory Free (WordPress plugin)
CVE-2025-30908: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...
PT-2025-14708 · Unknown · Shamalli Web Directory Free
Name of the Vulnerable Software and Affected Versions: Shamalli Web Directory Free versions 1.7.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.7.6 and earlier, update to a version that fixes this issu...
CVE-2025-28904
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-28904
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from n/a through = 1.7.6...
CVE-2025-28904
CVE-2025-28904 affects the Web Directory Free WordPress plugin (= 1.7.6); the connected documents indicate a patch exists. No exploit details are provided in the documents.
CVE-2025-28904: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from n/a through = 1.7.6...