185 matches found
CVE-2023-50859
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum WP Crowdfunding allows Stored XSS.This issue affects WP Crowdfunding: from n/a through 2.1.6...
EUVD-2017-8749
Malware in sbrugna...
EUVD-2018-13181
Malware in sbrugna...
EUVD-2017-8736
Malware in sbrugna...
EUVD-2024-32913
Malicious code in bioql PyPI...
EUVD-2024-40586
Malicious code in bioql PyPI...
EUVD-2023-58411
Malicious code in bioql PyPI...
EUVD-2025-21849
Malicious code in bioql PyPI...
EUVD-2023-55592
Malicious code in bioql PyPI...
EUVD-2025-9154
Malicious code in bioql PyPI...
EUVD-2023-32815
Malicious code in bioql PyPI...
EUVD-2024-34294
Malicious code in bioql PyPI...
EUVD-2025-11711
Malicious code in bioql PyPI...
EUVD-2023-46361
Malicious code in bioql PyPI...
EUVD-2024-35028
Malicious code in bioql PyPI...
CVE-2025-5767
The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-5767
The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-5767
CVE-2025-5767 : Crowdfunding for WooCommerce (WordPress) is affected by a stored XSS via the width parameter in versions up to 3.1.14. Exploitation requires authenticated access at Contributor level or higher, enabling an attacker to inject scripts that execute when a user visits the injected pag...
CVE-2025-5767 Crowdfunding for WooCommerce <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-5767 Crowdfunding for WooCommerce <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...