9 matches found
EUVD-2025-12315
Malicious code in bioql PyPI...
CVE-2025-49298
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through = 5.10.1...
CVE-2025-49298
CVE-2025-49298 is a stored XSS in the WordPress Event post plugin. Affected: Event post up to 5.10.1. Root cause: improper neutralization of input during web page generation. Impact per provided data: Cross‑site scripting risks (low–medium according to CVSS 3.1, 6.5 base). Remediation: patch/vers...
PT-2025-24229 · Unknown · Bastien Ho Event Post
Name of the Vulnerable Software and Affected Versions: Bastien Ho Event post versions n/a through 5.10.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Event post...
CVE-2025-46228
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post allows DOM-Based XSS. This issue affects Event post: from n/a through 5.9.11...
CVE-2025-46228
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows DOM-Based XSS.This issue affects Event post: from n/a through = 5.9.11...
CVE-2025-26923
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through = 5.9.8...
CVE-2025-26923
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through = 5.9.8...