EUVD-2024-36762

Malicious code in bioql PyPI...

EUVD-2025-30715

Malicious code in bioql PyPI...

CVE-2025-57915

Cross-Site Request Forgery CSRF vulnerability in César Martín TOCHAT.BE tochat-be allows Cross Site Request Forgery.This issue affects TOCHAT.BE: from n/a through = 1.3.4...

WordPress TOCHAT.BE Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin TOCHAT.BE versions = 1.3.4...

CVE-2025-57915 WordPress TOCHAT.BE Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in César Martín TOCHAT.BE tochat-be allows Cross Site Request Forgery.This issue affects TOCHAT.BE: from n/a through = 1.3.4...

CVE-2024-37563

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TOCHAT.BE allows Stored XSS.This issue affects TOCHAT.BE: from n/a through 1.3.0...

CVE-2024-37563

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TOCHAT.BE allows Stored XSS.This issue affects TOCHAT.BE: from n/a through 1.3.0...

CVE-2024-37563

CVE-2024-37563 is an unauthenticated stored XSS flaw in the TOCHAT.BE WordPress plugin (versions up to 1.3.0). The vulnerability arises from improper input neutralization during web page generation, enabling stored Cross-Site Scripting when user-supplied data is processed by the TOCHAT.BE compone...

CVE-2024-37563 WordPress TOCHAT.BE plugin <= 1.3.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TOCHAT.BE allows Stored XSS.This issue affects TOCHAT.BE: from n/a through 1.3.0...

WordPress TOCHAT.BE plugin <= 1.3.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin TOCHAT.BE versions = 1.3.0...

WordPress TOCHAT.BE Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software TOCHAT.BE Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37563 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5f55251cd57c Credits Joshua Chan Required privilege...