EUVD-2023-49092

Malicious code in bioql PyPI...

EUVD-2022-46381

Malicious code in bioql PyPI...

EUVD-2025-28857

Malicious code in bioql PyPI...

EUVD-2025-18570

Malicious code in bioql PyPI...

EUVD-2022-3180

Malicious code in bioql PyPI...

EUVD-2025-32267

Malicious code in bioql PyPI...

EUVD-2025-4616

Malicious code in bioql PyPI...

EUVD-2023-30877

Malicious code in bioql PyPI...

EUVD-2023-23848

Malicious code in bioql PyPI...

EUVD-2022-52735

Malicious code in bioql PyPI...

EUVD-2025-12369

Malicious code in bioql PyPI...

EUVD-2025-19254

Malicious code in bioql PyPI...

CVE-2025-9206

The Meks Easy Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title field in all version up to, and including, 2.1.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9206

CVE-2025-9206 (Meks Easy Maps for WordPress) : A stored Cross-Site Scripting (XSS) vulnerability affects Meks Easy Maps plugin up to version 2.1.4. The issue arises from insufficient input sanitization and output escaping in the post title field, allowing authenticated users with contributor-leve...

CVE-2025-60782

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS stored Cross-Site Scripting XSS vulnerability in the topics management module topics.php. Attackers can inject malicious JavaScript payloads into the Titlefield during topic creation or updates...

CVE-2025-57423

A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...

CVE-2025-60782

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS stored Cross-Site Scripting XSS vulnerability in the topics management module topics.php. Attackers can inject malicious JavaScript payloads into the Titlefield during topic creation or updates...

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log

...

Bolt before 3.6.10 has XSS via an image's alt or title field.

...

CVE-2025-60782

PHP Education Manager v1.0 is vulnerable to a stored Cross Site Scripting (XSS) in the topics.php module. The Title field used when creating or updating topics can inject malicious JavaScript, which can execute in affected users’ browsers. Affected product: PHP Education Manager v1.0; vulnerable ...