EUVD-2025-5943

Malicious code in bioql PyPI...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

CVE-2025-25461

A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS version 6.0.29 within the category name field . An attacker with "Add Category" permissions can inject a malicious payload that is stored on the server. When any user views a document associated with that category, the payload ex...