PT-2026-45887

Name of the Vulnerable Software and Affected Versions Passeum Ticketing versions prior to 1.1 Description The plugin is subject to Stored Cross-Site Scripting. This occurs because the get shop url method returns the shop name setting value without sanitization when it starts with "http", and the...

CVE-2025-70842

A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...

CVE-2017-12947

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators...

EUVD-2017-4470

Malware in sbrugna...

EUVD-2019-3295

Malware in sbrugna...

EUVD-2016-10439

Malware in sbrugna...

EUVD-2016-10190

Malware in sbrugna...

EUVD-2019-19281

Malware in sbrugna...

EUVD-2019-2929

Malware in sbrugna...

EUVD-2020-7250

Malware in sbrugna...

EUVD-2017-7351

Malware in sbrugna...

EUVD-2020-23255

Malware in sbrugna...

EUVD-2017-4495

Malware in sbrugna...

EUVD-2019-13380

Malware in sbrugna...

EUVD-2023-31764

Malicious code in bioql PyPI...

EUVD-2022-25053

Malicious code in bioql PyPI...

EUVD-2023-31765

Malicious code in bioql PyPI...

EUVD-2023-31759

Malicious code in bioql PyPI...

EUVD-2023-29825

Malicious code in bioql PyPI...

EUVD-2024-2553

Malicious code in bioql PyPI...