14 matches found
EUVD-2023-31874
Malicious code in bioql PyPI...
CVE-2025-30943
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aakif Kadiwala Posts Slider Shortcode posts-slider-shortcode allows DOM-Based XSS.This issue affects Posts Slider Shortcode: from n/a through = 1.0...
CVE-2025-30943
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aakif Kadiwala Posts Slider Shortcode posts-slider-shortcode allows DOM-Based XSS.This issue affects Posts Slider Shortcode: from n/a through = 1.0...
CVE-2025-30943
CVE-2025-30943 concerns WordPress plugin Posts Slider Shortcode . The vulnerability is due to improper neutralization of input during web page generation, enabling DOM-based XSS . Affected software is the Posts Slider Shortcode plugin for WordPress, versions up to 1.0 (likely inclusive). The CVE ...
CVE-2025-30943 WordPress Posts Slider Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aakif Kadiwala Posts Slider Shortcode posts-slider-shortcode allows DOM-Based XSS.This issue affects Posts Slider Shortcode: from n/a through = 1.0...
PT-2025-27886 · Unknown · Aakif Kadiwala Posts Slider Shortcode
Name of the Vulnerable Software and Affected Versions: Aakif Kadiwala Posts Slider Shortcode versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker...
CVE-2023-28166
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
CVE-2025-32507 WordPress Event Espresso plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aakif Kadiwala Event Espresso – Custom Email Template Shortcode email-shortcode allows Reflected XSS.This issue affects Event Espresso – Custom Email Template Shortcode: from n/a through = 1.0.0...
CVE-2023-28166
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
CVE-2023-28166
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
CVE-2023-28166 WordPress Tags Cloud Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
CVE-2023-28166
CVE-2023-28166 affects the WordPress plugin Tags Cloud Manager (versions ≤ 1.0.0). It is an unauthenticated, reflected XSS vulnerability caused by improper validation of user input. Exploitation could lead to script execution in a victim’s browser. Remediation: update to a version later than 1.0....
PT-2023-21602 · Unknown · Aakif Kadiwala Tags Cloud Manager
Name of the Vulnerable Software and Affected Versions: Aakif Kadiwala Tags Cloud Manager plugin versions 1.0.0 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...