EUVD-2024-53061

Malicious code in bioql PyPI...

EUVD-2025-3012

Malicious code in bioql PyPI...

EUVD-2025-8422

Malicious code in bioql PyPI...

EUVD-2025-11294

Malicious code in bioql PyPI...

EUVD-2024-23384

Malicious code in bioql PyPI...

EUVD-2023-52535

Malicious code in bioql PyPI...

EUVD-2023-52640

Malicious code in bioql PyPI...

EUVD-2024-23326

Malicious code in bioql PyPI...

EUVD-2024-54116

Malicious code in bioql PyPI...

EUVD-2023-52503

Malicious code in bioql PyPI...

EUVD-2024-45602

Malicious code in bioql PyPI...

PT-2025-38940

Name of the Vulnerable Software and Affected Versions PlayerJS versions through 2.24 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for potential malicious code execution with...

CVE-2025-46959

{"affected_software":"Adobe Experience Manager (AEM)","versions_affected":"6.5.22 and earlier","vulnerability":"DOM-based Cross-Site Scripting (XSS)","root_cause":"manipulation of the DOM environment to execute malicious JavaScript in the victim's browser","impact_note":"requires user interaction...

CVE-2025-53321

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raise The Money Raise The Money raise-the-money allows DOM-Based XSS.This issue affects Raise The Money: from n/a through = 5.2...

CVE-2025-53275

CVE-2025-53275 affects the WordPress plugin Leyka (versions

CVE-2025-50037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows DOM-Based XSS.This issue affects Buying Buddy IDX CRM: from n/a through = 2.3.0...

CVE-2025-49855 WordPress Meks Flexible Shortcodes plugin <= 1.3.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meks Meks Flexible Shortcodes meks-flexible-shortcodes allows DOM-Based XSS.This issue affects Meks Flexible Shortcodes: from n/a through = 1.3.7...

CVE-2025-49855 WordPress Meks Flexible Shortcodes plugin <= 1.3.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meks Meks Flexible Shortcodes allows DOM-Based XSS. This issue affects Meks Flexible Shortcodes: from n/a through 1.3.7...

WordPress plugin CubeWP Framework 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-46848

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields (CVE-2025-46848). The issue allows a low-privileged attacker to inject malicious scripts, which may execute in a user’s browser when visiting a page containing the affected field....