6 matches found
EUVD-2020-3969
Malware in sbrugna...
EUVD-2024-54186
Malicious code in bioql PyPI...
EUVD-2024-53913
Malicious code in bioql PyPI...
EUVD-2023-34046
Malicious code in bioql PyPI...
CVE-2021-32573
The express-cart package through 1.1.10 for Node.js allows Reflected XSS for an admin via a user input field for product options. NOTE: the vendor states that this "would rely on an admin hacking his/her own website...
CVE-2024-8050
The Custom Author Base WordPress plugin through 1.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...