EUVD-2025-29366

Malicious code in bioql PyPI...

PT-2024-30536

Name of the Vulnerable Software and Affected Versions ezplatform-richtext versions prior to the patched version fieldtype-richtext versions prior to the patched version Description The validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS, but this chec...

Cross-Site Scripting (XSS)

ezsystems/ezplatform-richtext is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in custom tags allowing an attacker to inject and execute malicious javascript...