EUVD-2025-14273

Malicious code in bioql PyPI...

CVE-2025-5035

The Firelight Lightbox WordPress plugin (versions prior to 2.3.16 ) is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper sanitization and escaping of title attributes before they are outputted on the page. This allows users with a role as low as contributors to execute mali...