10 matches found
cve-2016-10033-45
To build the dockers: $ sudo docker build . -t ep4/5.2.17 change 5.2.17 to 18 and 20. to run the dockers: $ sudo docker run -p 7001:80 ep4/5.2.17 change to 7001/7002/7003 and 5.2.17/18/20 in the respective folders...
EUVD-2025-5672
Malicious code in bioql PyPI...
CVE-2025-25083
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dave Lavoie EP4 More Embeds ep4-more-embeds allows Stored XSS.This issue affects EP4 More Embeds: from n/a through = 1.0.0...
CVE-2025-25083
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dave Lavoie EP4 More Embeds ep4-more-embeds allows Stored XSS.This issue affects EP4 More Embeds: from n/a through = 1.0.0...
CVE-2025-25083 WordPress EP4 More Embeds Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dave Lavoie EP4 More Embeds ep4-more-embeds allows Stored XSS.This issue affects EP4 More Embeds: from n/a through = 1.0.0...
CVE-2025-25083
Summary: CVE-2025-25083 affects the WordPress EP4 More Embeds plugin (versions <= 1.0.0). The vulnerability is a Stored Cross-Site Scripting (XSS) caused by improper neutralization of input during web page generation. Affected software: WordPress EP4 More Embeds plugin (
PT-2025-9427
Name of the Vulnerable Software and Affected Versions EP4 More Embeds versions 1.0.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS vulnerability...
WordPress plugin EP4: More Embeds – Cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-25083: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dave Lavoie EP4 More Embeds ep4-more-embeds allows Stored XSS.This issue affects EP4 More Embeds: from n/a through = 1.0.0...
Security Bulletin: Denial of Service attack possible on Cúram instances using Apache Commons FileUpload (CVE-2014-0050)
Summary A version of Apache Commons FileUpload shipped with Cúram is vulnerable to a denial of service attack. Vulnerability Details CVEID: CVE-2014-0050 DESCRIPTION: Apache Commons FileUpload is vulnerable to a denial of service, caused by the improper handling of Content-Type HTTP header for...