EUVD-2025-5943

Malicious code in bioql PyPI...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

CVE-2025-25461

CVE-2025-25461 affects SeedDMS 6.0.29. A stored XSS flaw exists in the category-name field: a user with Add Category permission can inject payloads that are stored server-side and rendered unencoded when a document is viewed, allowing execution in other users’ browsers. The root cause is lack of ...