342 matches found
CVE-2025-11804
CVE-2025-11804 affects the WordPress plugin JB News Ticker. The vulnerability is a Stored Cross-Site Scripting flaw exploitable via the id attribute of the jbticker shortcode, present in all versions up to 1.0. It requires authenticated access at contributor level or higher, enabling an attacker ...
CVE-2025-11804 JB News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The JB News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the 'jbticker' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
WordPress plugin JB News Ticker 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-11804: Improper Neutralization of Input During Web Page Generation
The JB News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the 'jbticker' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
PT-2025-43037
Name of the Vulnerable Software and Affected Versions JB News Ticker plugin for WordPress versions up to and including 1.0 Description The JB News Ticker plugin for WordPress is susceptible to Stored Cross-Site Scripting through the id shortcode attribute of the jbticker shortcode. This is caused...
WordPress JB News Ticker plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin JB News Ticker versions = 1.0...
WordPress Any News Ticker plugin cross-site scripting vulnerability
WordPress Any News Ticker plugin is a functional plugin for adding dynamic scrolling news tickers to your website. WordPress Any News Ticker plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of any-ticker, which can...
EUVD-2012-2065
Malware in sbrugna...
EUVD-2008-6118
Malware in sbrugna...
EUVD-2024-47471
Malicious code in bioql PyPI...
EUVD-2024-22456
Malicious code in bioql PyPI...
EUVD-2025-31683
Malicious code in bioql PyPI...
EUVD-2023-31362
Malicious code in bioql PyPI...
EUVD-2025-3172
Malicious code in bioql PyPI...
EUVD-2025-4027
Malicious code in bioql PyPI...
EUVD-2025-7963
Malicious code in bioql PyPI...
EUVD-2023-57747
Malicious code in bioql PyPI...
EUVD-2024-45630
Malicious code in bioql PyPI...