214 matches found
CVE-2023-4820
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin...
CVE-2020-12696
The iframe plugin before 4.5 for WordPress does not sanitize a URL...
CVE-2025-1987
A Cross-Site Scripting XSS vulnerability has been identified in Psono-Client’s handling of vault entries of type websitepassword and bookmark, as used in Bitdefender SecurePass. The client does not properly sanitize the URL field in these entries. As a result, an attacker can craft a malicious...
EUVD-2021-11899
Malware in sbrugna...
EUVD-2017-0258
Malware in sbrugna...
EUVD-2020-25306
Malware in sbrugna...
EUVD-2021-20916
Malware in sbrugna...
EUVD-2019-7034
Malware in sbrugna...
EUVD-2021-11680
Malware in sbrugna...
EUVD-2020-5030
Malware in sbrugna...
EUVD-2022-1894
Malicious code in bioql PyPI...
EUVD-2022-42814
Malicious code in bioql PyPI...
EUVD-2024-22493
Malicious code in bioql PyPI...
EUVD-2023-28094
Malicious code in bioql PyPI...
EUVD-2022-5842
Malicious code in bioql PyPI...
EUVD-2022-34343
Malicious code in bioql PyPI...
EUVD-2023-48171
Malicious code in bioql PyPI...
EUVD-2023-1976
Malicious code in bioql PyPI...
Element Plus Link component (el-link) implements insufficient input validation for the href attribute
Element Plus Link component el-link prior to 2.11.0 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor elements without protocol...
PT-2025-36908
Name of the Vulnerable Software and Affected Versions: Element Plus versions through 2.10.6 Description: The Element Plus Link component el-link does not sufficiently validate input for the href attribute, creating a security gap. This allows attackers to inject malicious URLs using dangerous...