49 matches found
CVE-2026-67612
OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML and JavaScript by storing malicious payloads through the template save mode, which only filters literal PHP open tags...
CVE-2026-39932
CVE-2026-39932 affects OpenEMR 8.2.0, enabling remote code execution through the document category tree component. The vulnerability arises from an unsanitized eval() in CategoryTree (library/classes/Tree.class.php) that executes PHP payloads injected into the categories table. An authenticated a...
PT-2026-45887
Name of the Vulnerable Software and Affected Versions Passeum Ticketing versions prior to 1.1 Description The plugin is subject to Stored Cross-Site Scripting. This occurs because the get shop url method returns the shop name setting value without sanitization when it starts with "http", and the...
CVE-2025-70842
A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...
CVE-2017-12947
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators...
EUVD-2019-19281
Malware in sbrugna...
EUVD-2019-2929
Malware in sbrugna...
EUVD-2017-4495
Malware in sbrugna...
EUVD-2016-10190
Malware in sbrugna...
EUVD-2020-7250
Malware in sbrugna...
EUVD-2019-3295
Malware in sbrugna...
EUVD-2017-4470
Malware in sbrugna...
EUVD-2016-10439
Malware in sbrugna...
EUVD-2020-23255
Malware in sbrugna...
EUVD-2019-13380
Malware in sbrugna...
EUVD-2017-7351
Malware in sbrugna...
EUVD-2024-2553
Malicious code in bioql PyPI...
EUVD-2023-31765
Malicious code in bioql PyPI...