CVE-2026-8626

CVE-2026-8626 concerns the SponsorMe WordPress plugin, vulnerable to Reflected Cross-Site Scripting via the PHP_SELF parameter in all versions up to 0.5.2. The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts int...

CVE-2021-27973

SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages...

EUVD-2022-34015

Malicious code in bioql PyPI...

EUVD-2022-34011

Malicious code in bioql PyPI...

EUVD-2025-26357

Malicious code in bioql PyPI...

taoCMS 代码注入漏洞

taoCMS is a Chinese micro CMS Content Management System. A code injection vulnerability exists in taoCMS version 3.0.2, which stems from a problem in the file /admin/admin.php that can lead to code injection...