EUVD-2024-50187

Malicious code in bioql PyPI...

EUVD-2023-54285

Malicious code in bioql PyPI...

EUVD-2024-47721

Malicious code in bioql PyPI...

EUVD-2022-24894

Malicious code in bioql PyPI...

EUVD-2025-18246

Malicious code in bioql PyPI...

EUVD-2024-32507

Malicious code in bioql PyPI...

EUVD-2024-16405

Malicious code in bioql PyPI...

EUVD-2022-42678

Malicious code in bioql PyPI...

EUVD-2025-16841

Malicious code in bioql PyPI...

EUVD-2023-38792

Malicious code in bioql PyPI...

EUVD-2022-6676

Malicious code in bioql PyPI...

EUVD-2023-24042

Malicious code in bioql PyPI...

EUVD-2024-32880

Malicious code in bioql PyPI...

CVE-2025-9332

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-10053

CVE-2025-10053 concerns the WordPress plugin TableGen – Data Table Generator . The vulnerability is a stored XSS in admin settings due to insufficient input sanitization and output escaping, affecting all versions up to 1.3.1. Exploitation requires authenticated access with administrator-level pr...

CVE-2025-9333 Smart Docs <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2025-9333 Smart Docs <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2025-9333

CVE-2025-9333 affects the WordPress plugin Smart Docs. The vulnerability is a Stored Cross-Site Scripting flaw in admin settings for versions up to and including 1.1.1, caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access with administrator-lev...

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-9333: Improper Neutralization of Input During Web Page Generation

The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...