EUVD-2023-59261

Malicious code in bioql PyPI...

EUVD-2023-59142

Malicious code in bioql PyPI...

EUVD-2022-34457

Malicious code in bioql PyPI...

EUVD-2022-25104

Malicious code in bioql PyPI...

EUVD-2022-25225

Malicious code in bioql PyPI...

EUVD-2024-54166

Malicious code in bioql PyPI...

EUVD-2025-15235

Malicious code in bioql PyPI...

EUVD-2023-58729

Malicious code in bioql PyPI...

EUVD-2025-4836

Malicious code in bioql PyPI...

EUVD-2023-54285

Malicious code in bioql PyPI...

EUVD-2025-25457

Malicious code in bioql PyPI...

EUVD-2024-31639

Malicious code in bioql PyPI...

EUVD-2024-47721

Malicious code in bioql PyPI...

CVE-2025-9332

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-10053

CVE-2025-10053 concerns the WordPress plugin TableGen – Data Table Generator . The vulnerability is a stored XSS in admin settings due to insufficient input sanitization and output escaping, affecting all versions up to 1.3.1. Exploitation requires authenticated access with administrator-level pr...

CVE-2025-9333 Smart Docs <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2025-9333

CVE-2025-9333 affects the WordPress plugin Smart Docs. The vulnerability is a Stored Cross-Site Scripting flaw in admin settings for versions up to and including 1.1.1, caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access with administrator-lev...

CVE-2025-9333 Smart Docs <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

PT-2025-40466

Name of the Vulnerable Software and Affected Versions TableGen – Data Table Generator plugin for WordPress versions prior to 1.3.2 Description The software is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output escaping allow authenticated...