EUVD-2025-54067

Malicious code in greasy-green-cricket npm...

MAL-2025-70973 Malicious code in supposed-scarlet-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e32572fd9ae5d70a5c1c803eb1bebe0ee660e2e816b7dbcdb908adbfc66a27a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49197

Malicious code in thoughtlesscricketz3n npm...

Malicious code in established_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e1bbf1836946a719398d374e99d365fc0d449aaa2e50bee9ea80a780d17e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49419

Malicious code in selectedcricketz3n npm...

EUVD-2025-47424

Malicious code in givencricketz3n npm...

EUVD-2025-1760

Malicious code in bioql PyPI...

EUVD-2024-34283

Malicious code in bioql PyPI...

EUVD-2025-1761

Malicious code in bioql PyPI...

EUVD-2025-8761

Malicious code in bioql PyPI...

CVE-2025-0563

A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash/update.php. The manipulation of the argument uname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-11877

The Cricket Live Score plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cricketscore' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-31597

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazycric Ultimate Live Cricket WordPress Lite ultimate-live-cricket-lite allows Stored XSS.This issue affects Ultimate Live Cricket WordPress Lite: from n/a through = 1.4.2...

WordPress Ultimate Live Cricket WordPress Lite plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Ultimate Live Cricket WordPress Lite versions = 1.4.2...

CVE-2025-31597

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazycric Ultimate Live Cricket WordPress Lite ultimate-live-cricket-lite allows Stored XSS.This issue affects Ultimate Live Cricket WordPress Lite: from n/a through = 1.4.2...

CVE-2025-31597 WordPress Ultimate Live Cricket WordPress Lite plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazycric Ultimate Live Cricket WordPress Lite ultimate-live-cricket-lite allows Stored XSS.This issue affects Ultimate Live Cricket WordPress Lite: from n/a through = 1.4.2...

CVE-2025-31597

CVE-2025-31597 is a Stored XSS in the Ultimate Live Cricket WordPress Lite plugin. Affected: Ultimate Live Cricket WordPress Lite from n/a up to 1.4.2. Root cause per description: improper neutralization of input during web page generation. Impact noted as cross-site scripting; no exploitation de...

WordPress plugin Ultimate Live Cricket WordPress Lite has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-13744

Name of the Vulnerable Software and Affected Versions crazycric Ultimate Live Cricket WordPress Lite versions 1.4.2 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS...

CVE-2025-31597: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazycric Ultimate Live Cricket WordPress Lite ultimate-live-cricket-lite allows Stored XSS.This issue affects Ultimate Live Cricket WordPress Lite: from n/a through = 1.4.2...