1291 matches found
PT-2025-41646
Name of the Vulnerable Software and Affected Versions Enable Media Replace plugin for WordPress versions up to and including 4.1.6 Description The software is susceptible to Stored Cross-Site Scripting through the file modified shortcode. Insufficient input sanitization and output escaping on...
CVE-2025-60869
Publii CMS v0.46.5 (build 17089) is affected by a stored XSS in configuration fields (e.g., Site Description, Footer Follow Buttons). The issue arises from unsanitized input, allowing injected JavaScript to be stored in the project and executed in visitors’ browsers when viewing the generated sta...
EUVD-2025-33177
Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /book/addCommentReply endpoint. An authenticated user can inject malicious JavaScript through the replyContent parameter when replying to a book comment. The payload is stored in the database a...
CVE-2025-60298
Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /author/updateIndexName endpoint. This vulnerability allows authenticated attackers to inject malicious JavaScript code through the indexName parameter, which gets stored in the database and...
CVE-2025-61999 OPEXUS FOIAXpress stored XSS via logo image
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...
EUVD-2021-11341
Malware in sbrugna...
CVE-2025-8726
CVE-2025-8726 affects the WordPress plugin WP Photo Album Plus (versions up to and including 9.0.11.006). The vulnerability is a stored XSS in the wppa_user_upload function, exploitable by authenticated users with Subscriber+ privileges, allowing injection of scripts that run in victims’ browsers...
EUVD-2025-26056
Malicious code in bioql PyPI...
EUVD-2025-26908
Malicious code in bioql PyPI...
EUVD-2025-26971
Malicious code in bioql PyPI...
EUVD-2025-28748
Malicious code in bioql PyPI...
EUVD-2025-28467
Malicious code in bioql PyPI...
EUVD-2025-30575
Malicious code in bioql PyPI...
EUVD-2025-30536
Malicious code in bioql PyPI...
EUVD-2025-31693
Malicious code in bioql PyPI...
EUVD-2025-27128
Malicious code in bioql PyPI...
EUVD-2025-17927
Malicious code in bioql PyPI...
EUVD-2025-29168
Malicious code in bioql PyPI...