EUVD-2022-51406

Malicious code in bioql PyPI...

CVE-2022-4027: Improper Neutralization of Input During Web Page Generation

The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during a forum response in versions up to, and including, 6.8 due to insufficient input sanitization and output escaping that makes injecting object and embed tags possible...

PT-2022-25312 · WordPress · Simple:Press

Name of the Vulnerable Software and Affected Versions: Simple:Press plugin for WordPress versions up to, and including, 6.8 Description: The issue concerns Stored Cross-Site Scripting via the postitem parameter manipulated during a forum response. This is due to insufficient input sanitization an...