128 matches found
Quill is vulnerable to XSS via HTML export feature
A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting XSS. This issue affects Quill: 2.0.3...
GHSA-824X-88XG-CWRV Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read
Summary Authenticated users with backup permissions can read arbitrary files within the webroot via path traversal in the Backup addon's file export functionality. Details The Backup addon does not validate the EXPDIR POST parameter against the UI-generated allowlist of permitted directories. An...
CVE-2025-12894 Import WP – Export and Import CSV and XML files to WordPress <= 2.14.17 - Unauthenticated Information Exposure
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This makes it possible for unauthenticated...
EUVD-2008-2223
Malware in sbrugna...
EUVD-2021-25149
Malware in sbrugna...
EUVD-2019-10559
Malware in sbrugna...
EUVD-2020-17861
Malware in sbrugna...
EUVD-2020-19055
Malware in sbrugna...
EUVD-2018-20709
Malware in sbrugna...
EUVD-2022-43336
Malicious code in bioql PyPI...
EUVD-2025-18141
Malicious code in bioql PyPI...
EUVD-2025-6282
Malicious code in bioql PyPI...
EUVD-2024-21559
Malicious code in bioql PyPI...
EUVD-2024-33647
Malicious code in bioql PyPI...
GHSA-74RG-6F92-G6WX UnoPim has CSV Injection on Quick Export feature
Summary Description: CSV Injection or Formula Injection is a security vulnerability that occurs when malicious content is inserted into a CSV Comma-Separated Values file, which is then opened in a spreadsheet application like Microsoft Excel. This attack exploits the way spreadsheet software...
CVE-2025-30085 Extension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla
Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature...
CVE-2025-30085 Extension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla
Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature...
PT-2025-25251 · Joomla · Rsform!Pro
Name of the Vulnerable Software and Affected Versions: RSForm!pro versions 3.0.0 through 3.3.14 Description: A remote code execution vulnerability was discovered in the RSForm!pro component for Joomla. The issue occurs within the submission export feature and requires administrative access to the...
CVE-2023-27481
Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with read access to the password field in directususers can extract the argon2 password hashes by brute forcing the export functionality combined with a startswith filter. This allow...