EUVD-2024-51518

Malicious code in bioql PyPI...

CVE-2024-13305

The Drupal Entity Form Steps module (versions 0.0.0 through 1.1.3 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the module fails to escape plain text administrative configurations , which allows an attacker with the...

CVE-2024-13305 Entity Form Steps - Moderately critical - Cross site scripting - SA-CONTRIB-2024-071

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Entity Form Steps allows Cross-Site Scripting XSS.This issue affects Entity Form Steps: from 0.0.0 before 1.1.4...