EUVD-2021-30373

Malicious code in bioql PyPI...

EUVD-2021-30374

Malicious code in bioql PyPI...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

Design/Logic Flaw

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

Cross site scripting

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43441

CVE-2021-43441 affects iOrder 1.0 with an HTML Injection vulnerability in the signup form. Public references consistently describe an HTML injection that could allow an attacker to render arbitrary HTML when a user submits the signup form. CVSS metrics (NVD) show a base score around 5.3 (3.1) wit...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43440

CVE-2021-43440 affects iOrder 1.0. The vulnerability is multiple stored XSS flaws in the signup form (Name and Phone fields) that could allow remote attackers to execute arbitrary code. The NVD entry confirms a stored XSS issue with a baseline impact of partial integrity loss and no confidentiali...