8 matches found
EUVD-2025-2727
Malicious code in bioql PyPI...
EUVD-2025-8408
Malicious code in bioql PyPI...
CVE-2025-22327
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP fw-integration-for-emailoctopus allows Stored XSS.This issue affects EO4WP: from n/a through = 1.0.8.1...
CVE-2025-30763
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP fw-integration-for-emailoctopus allows Stored XSS.This issue affects EO4WP: from n/a through = 1.0.8.4...
CVE-2025-30763
CVE-2025-30763 (EO4WP: EmailOctopus for WordPress) is a stored XSS in EO4WP versions up to and including 1.0.8.4 due to improper neutralization of input during web page generation. Exploitation requires user interaction and can affect pages generated by EO4WP. The issue is confirmed in connected ...
WordPress plugin EO4WP cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin EO4WP version 1.0.7 and previous versions of cross-site scripting vulnerability , the...
CVE-2025-22327
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP fw-integration-for-emailoctopus allows Stored XSS.This issue affects EO4WP: from n/a through = 1.0.8.1...
CVE-2025-22327
CVE-2025-22327 is an EO4WP WordPress plugin stored XSS in EO4WP (WordPress plugin for EmailOctopus) affecting EO4WP versions up to 1.0.7. ENISA/Red Hat entries corroborate the vulnerability description; ENISA EUVD-2025-2727/EO4WP note indicates escalation via stored XSS, with EO4WP fixed in a lat...