CVE-2025-59540 Chamilo: Stored Cross-Site Scripting (XSS) in Chamilo LMS Exercise Feedback

Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that allows a staff account to execute arbitrary JavaScript in the browser of higher-privileged admin users. The issue arises because feedback input in the exercise history page is...

CVE-2025-59540: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that allows a staff account to execute arbitrary JavaScript in the browser of higher-privileged admin users. The issue arises because feedback input in the exercise history page is...

PT-2026-23632

Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that allows a staff account to execute arbitrary JavaScript in the browser of higher-privileged admin users. The issue arises because feedback input in the exercise history page is...

Malicious code in pear-apps-lib-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331d2742dee8271e5d493e475aab23ee3f05adc5e02888d87127d189883cc50c The package pear-apps-lib-feedback was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview pear-apps-lib-feedback is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Deep Learning-Driven Friendly Jamming for Secure Multicarrier ISAC under Channel Uncertainty

Integrated sensing and communication ISAC systems promise efficient spectrum utilization by jointly supporting radar sensing and wireless communication. This paper presents a deep learning-driven framework for enhancing physical-layer security in multicarrier ISAC systems under imperfect channel...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28416 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28416 Source advisory: OSV:GHSA-JMH7-G254-2CQ9...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28416 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28416 Source advisory: GHSA-JMH7-G254-2CQ9...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28415 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28415 Source advisory: GHSA-PFJF-5GXR-995X...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28414 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28414 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28414 Source advisory: GHSA-39MP-8HJ3-5C49...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-27167 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-27167 Source advisory: SNYK:PYTHON-GRADIO-15366402...

PT-2026-36466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the logitech-hidpp module during the probing of the Logitech G920 Driving Force Racing Wheel for Xbox One. If force feedback initialisation fails, an...

CVE-2025-68856

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeswolters Mopinion Feedback Form mopinion-feedback-form allows DOM-Based XSS.This issue affects Mopinion Feedback Form: from n/a through = 1.1.1...

CVE-2025-68856

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeswolters Mopinion Feedback Form mopinion-feedback-form allows DOM-Based XSS.This issue affects Mopinion Feedback Form: from n/a through = 1.1.1...

CVE-2025-68856

CVE-2025-68856 affects the Mopinion Feedback Form WordPress plugin (versions through 1.1.1). Initial documentation describes a Cross-Site Scripting vulnerability in the mopinion-feedback-form component; Red Hat/NVD entries describe it as DOM-Based XSS, while Wordfence categorizes it as Reflected ...

CVE-2025-68856 WordPress Mopinion Feedback Form plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeswolters Mopinion Feedback Form mopinion-feedback-form allows DOM-Based XSS.This issue affects Mopinion Feedback Form: from n/a through = 1.1.1...

CVE-2025-68856 WordPress Mopinion Feedback Form plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeswolters Mopinion Feedback Form mopinion-feedback-form allows DOM-Based XSS.This issue affects Mopinion Feedback Form: from n/a through = 1.1.1...

PT-2026-21115

Name of the Vulnerable Software and Affected Versions Mopinion Feedback Form versions through 1.1.1 Description The Mopinion Feedback Form software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for t...

WordPress plugin Mopinion Feedback Form has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...