EUVD-2025-14273

Malicious code in bioql PyPI...

CVE-2025-5035

The Firelight Lightbox WordPress plugin is vulnerable to a stored Cross-Site Scripting (XSS) attack in versions prior to 2.3.16 . The root cause is the failure to properly sanitise and escape title attributes before they are outputted on the page. This flaw allows users with privileges as low as ...