CVE-2025-60312: Improper Neutralization of Input During Web Page Generation

Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...

EUVD-2023-1264

Malicious code in bioql PyPI...

EUVD-2025-18513

Malicious code in bioql PyPI...

EUVD-2022-3521

Malicious code in bioql PyPI...

EUVD-2025-10903

Malicious code in bioql PyPI...

EUVD-2022-49685

Malicious code in bioql PyPI...

EUVD-2022-3757

Malicious code in bioql PyPI...

EUVD-2022-5440

Malicious code in bioql PyPI...

EUVD-2022-4121

Malicious code in bioql PyPI...

EUVD-2022-40803

Malicious code in bioql PyPI...

EUVD-2022-34456

Malicious code in bioql PyPI...

EUVD-2022-49684

Malicious code in bioql PyPI...

EUVD-2022-2986

Malicious code in bioql PyPI...

EUVD-2024-2272

Malicious code in bioql PyPI...

EUVD-2022-3648

Malicious code in bioql PyPI...

EUVD-2022-4892

Malicious code in bioql PyPI...

Vite 访问控制错误漏洞

Vite is a new front-end build tool from Vite Open Source. An access control error vulnerability exists in Vite versions prior to 7.1.5, prior to 7.0.7, prior to 6.3.6, and prior to 5.4.20, which stems from explicitly exposing the Vite development server to the network resulting in arbitrary HTML...

CVE-2025-44136: Improper Neutralization of Input During Web Page Generation

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser...

CVE-2025-53835

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Starting in version 5.4.5 and prior to version 14.10, the XHTML syntax depended on the xdom+xml/current syntax which allows the creation of raw blocks...

GHSA-P85Q-MWW9-GWQF Citizen Short Description stored XSS vulnerability through wikitext

Summary Short descriptions are not properly sanitized by the ShortDescription before being inserted as HTML using mw.util.addSubtitle, allowing any user to insert arbitrary HTML into the DOM by editing a page. Details The description provided by the user via the SHORTDESC: parser function is...