EUVD-2023-31211

Malicious code in bioql PyPI...

EUVD-2024-52044

Malicious code in bioql PyPI...

CVE-2025-58810

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jimmywb Simple Link List Widget simple-link-list-widget allows Stored XSS.This issue affects Simple Link List Widget: from n/a through = 0.3.2...

CVE-2025-58810

CVE-2025-58810 relates to the WordPress plugin Simple Link List Widget (versions

CVE-2025-58810 WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jimmywb Simple Link List Widget simple-link-list-widget allows Stored XSS.This issue affects Simple Link List Widget: from n/a through = 0.3.2...

WordPress plugin Simple Link List Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-36149

Name of the Vulnerable Software and Affected Versions: jimmywb Simple Link List Widget versions through 0.3.2 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations...

CVE-2023-27435

Cross-Site Request Forgery CSRF vulnerability in Sami Ahmed Siddiqui HTTP Auth plugin = 0.3.2 versions...

CVE-2020-36452

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...

CVE-2025-28931

Cross-Site Request Forgery CSRF vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through = 0.3.2...

CVE-2025-28931

Cross-Site Request Forgery CSRF vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through = 0.3.2...

CVE-2025-28931

CVE-2025-28931 : A CSRF to Stored XSS flaw affects the WordPress Hashtags plugin (wp-hashtags)

Mavo 跨站脚本漏洞

Mavo is a framework from the Mavo open source. A security vulnerability exists in Mavo version v0.3.2, which stems from DOM Clobbering and allows execution of arbitrary code via specially crafted HTML elements...

CVE-2024-53388

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2024-53711

Cross-Site Request Forgery CSRF vulnerability in tranchesdunet Hotlink2Watermark hotlink2watermark allows Stored XSS.This issue affects Hotlink2Watermark: from n/a through = 0.3.2...

umicat 安全漏洞

umicat is a reverse proxy load balancing server for SunBK201 individual developers. A security vulnerability exists in umicat version v.0.3.2, which stems from power in src/uctupstream.c contains an arbitrary code execution vulnerability...

WordPress Hotlink2Watermark plugin <= 0.3.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Hotlink2Watermark versions = 0.3.2...

PT-2024-12114 · Taskcafe · Taskcafe

Name of the Vulnerable Software and Affected Versions: Taskcafe version 0.3.2 Description: The issue is related to a lack of validation in the filetype when uploading a SVG profile picture with a XSS payload. An authenticated attacker can exploit this by uploading a malicious picture, which will...

Jordanknott Taskcafe 安全漏洞

Jordanknott Taskcafe is a project management tool developed in Go language by Jordanknott. A security vulnerability exists in Jordanknott Taskcafe version 0.3.2 that stems from vulnerability to cross-site scripting XSS attacks...

Jordanknott Taskcafe 安全漏洞

Jordanknott Taskcafe is a project management tool developed in the Go language by Jordanknott. A security vulnerability exists in Jordanknott Taskcafe version 0.3.2, which stems from a lack of validation of cookie values, and allows any unauthenticated attacker who knows the ID of a registered us...