EUVD-2025-31218

Malicious code in bioql PyPI...

EUVD-2024-40214

Malicious code in bioql PyPI...

EUVD-2022-2033

Malicious code in bioql PyPI...

EUVD-2023-26995

Malicious code in bioql PyPI...

EUVD-2023-26998

Malicious code in bioql PyPI...

EUVD-2022-4988

Malicious code in bioql PyPI...

EUVD-2024-48293

Malicious code in bioql PyPI...

EUVD-2024-40565

Malicious code in bioql PyPI...

EUVD-2023-26997

Malicious code in bioql PyPI...

EUVD-2022-35073

Malicious code in bioql PyPI...

EUVD-2024-49616

Malicious code in bioql PyPI...

EUVD-2024-47542

Malicious code in bioql PyPI...

CVE-2025-10490

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-10490

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-10490 Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-10490 Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-10490

CVE-2025-10490 affects Zephyr Project Manager, a WordPress plugin. A Stored XSS flaw exists in admin settings across all versions up to 3.3.202, exploitable by authenticated administrators (and above) on multi-site setups with unfiltered_html disabled. Impact is arbitrary script injection that ex...

WordPress Zephyr Project Manager plugin <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin Zephyr Project Manager versions = 3.3.202...

WordPress plugin Zephyr Project Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-39518

Name of the Vulnerable Software and Affected Versions Zephyr Project Manager plugin for WordPress versions prior to 3.3.203 Description The Zephyr Project Manager plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output...