archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2026-15307 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2026-15830 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

ashley (1.0.0b4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-15830 via django (3.1.4)

django PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley 1.0.0b4 - hazard-feed =0.2.0, =0.2.5 - kiwitcms 8.9.0 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2026-53878 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2026-53877 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

ashley (1.0.0b4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-48588 via django (3.1.4)

django PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley 1.0.0b4 - hazard-feed =0.2.0, =0.2.5 - kiwitcms 8.9.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

ashley (1.0.0b4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-53878 via django (3.1.4)

django PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley 1.0.0b4 - hazard-feed =0.2.0, =0.2.5 - kiwitcms 8.9.0 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

ashley (1.0.0b4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-53877 via django (3.1.4)

django PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley 1.0.0b4 - hazard-feed =0.2.0, =0.2.5 - kiwitcms 8.9.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2024-45231 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

ashley (1.0.0b4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-6873 via django (3.1.4)

django PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley 1.0.0b4 - hazard-feed =0.2.0, =0.2.5 - kiwitcms 8.9.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2026-48587 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2025-64458 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2025-64459 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

EUVD-2025-8336

Malicious code in bioql PyPI...

WordPress Ashley <= 1.7.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Ashley versions = 1.7.0...

WordPress Ashley Theme <= 1.7.0 is vulnerable to Local File Inclusion

Software Ashley Type Theme Vulnerable versions = 1.7.0 Fixed in 1.8.0 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID fa01b9d5a6af Credits Bonds Required privilege Unauthenticated Published...

CVE-2025-30847

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashley Novelist novelist allows Stored XSS.This issue affects Novelist: from n/a through = 1.2.3...

CVE-2025-30847

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashley Novelist novelist allows Stored XSS.This issue affects Novelist: from n/a through = 1.2.3...

CVE-2025-30847

CVE-2025-30847: Stored XSS in the Novelist WordPress plugin (Novelist) affecting versions up to 1.2.3. Exploitation requires authentication (Administrator+). Patch available to address the issue; affected range is from n/a through 1.2.3; CVSS v3.1 base score 5.9 (Medium).

WordPress plugin Ashley Novelist 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...