EUVD-2021-28076

Malicious code in bioql PyPI...

Cross site scripting

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

CVE-2021-40921

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

CVE-2021-40921

CVE-2021-40921 affects Detector versions 0.8.5 and earlier. The vulnerability lies in the _contactform.inc.php code path, where the cid parameter enables cross-site scripting (XSS) by injecting arbitrary web script or HTML. Impact is described as allowing an attacker to compromise client-side int...