138 matches found
CVE-2022-0659
The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2024-2439
The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
EUVD-2022-52050
Malicious code in bioql PyPI...
EUVD-2024-49774
Malicious code in bioql PyPI...
EUVD-2024-49330
Malicious code in bioql PyPI...
EUVD-2024-33220
Malicious code in bioql PyPI...
EUVD-2024-33338
Malicious code in bioql PyPI...
EUVD-2023-57394
Malicious code in bioql PyPI...
EUVD-2023-44054
Malicious code in bioql PyPI...
EUVD-2024-34336
Malicious code in bioql PyPI...
EUVD-2024-49376
Malicious code in bioql PyPI...
EUVD-2023-54355
Malicious code in bioql PyPI...
EUVD-2024-33051
Malicious code in bioql PyPI...
EUVD-2024-50161
Malicious code in bioql PyPI...
EUVD-2024-27404
Malicious code in bioql PyPI...
EUVD-2024-33819
Malicious code in bioql PyPI...
EUVD-2024-17579
Malicious code in bioql PyPI...
EUVD-2024-32965
Malicious code in bioql PyPI...