EUVD-2025-24666

Malicious code in bioql PyPI...

EUVD-2023-25942

Malicious code in bioql PyPI...

EUVD-2022-25037

Malicious code in bioql PyPI...

EUVD-2025-29671

Malicious code in bioql PyPI...

EUVD-2025-25031

Malicious code in bioql PyPI...

EUVD-2023-39393

Malicious code in bioql PyPI...

EUVD-2025-2459

Malicious code in bioql PyPI...

EUVD-2022-35398

Malicious code in bioql PyPI...

EUVD-2022-33554

Malicious code in bioql PyPI...

EUVD-2023-12923

Malicious code in bioql PyPI...

EUVD-2022-34471

Malicious code in bioql PyPI...

EUVD-2024-50985

Malicious code in bioql PyPI...

EUVD-2022-34219

Malicious code in bioql PyPI...

EUVD-2025-15742

Malicious code in bioql PyPI...

EUVD-2022-35331

Malicious code in bioql PyPI...

EUVD-2022-24355

Malicious code in bioql PyPI...

EUVD-2022-6089

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rich text field in web content articles. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting crafted input to this field. Details Cross-site scripting or XSS is a code...

CVE-2025-9115

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Publisher portal. An attacker can execute arbitrary JavaScript in the context of another user's browser by uploading a crafted API document containing malicious scripts. This can lead to unauthorized UI...