CVE-2026-88997

CVE-2026-88997 JSM Show Post Metadata 4.9.1 — XSS Almacenado con Contributor+ a través de Custom Field Meta Key...

CVE-2026-88997

The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute in an admin-facing meta box, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the...

WordPress JSM Show Post Metadata plugin < 4.9.1 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by pervinzahidli in WordPress Plugin JSM Show Post Metadata versions 4.9.1...

CVE-2026-88997 JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Key

The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute in an admin-facing meta box, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the...

EUVD-2026-85052

The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute in an admin-facing meta box, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the...

CVE-2026-88997

The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute in an admin-facing meta box, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Drivers: Serial: JSM – fixed some leaks in the probe. This error path needs to be unwound instead of just being returned directly...

The vulnerability of the jsm_probe_one() function in the drivers/tty/serial/jsm/jsm_driver.c file of the console TTY driver in the Linux kernel’s serial port module allows a attacker to cause a service failure.

The vulnerability of the jsmprobeone function in the drivers/tty/serial/jsm/jsmdriver.c file of the console TTY driver in the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004829 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38265)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38265 advisory. - In the Linux kernel, the following vulnerability has been resolved: serial: jsm: fix NPE during...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992969 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992558 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2501)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in skbunclonekeeptruesizeCVE-2022-49142...

EUVD-2025-3793

Malicious code in bioql PyPI...

EUVD-2023-59183

Malicious code in bioql PyPI...

CVE-2025-58653

CVE-2025-58653 affects the WordPress plugin JSM file_get_contents Shortcode (JSM file_get_contents() Shortcode). Description indicates improper input neutralization leading to a Stored XSS within the shortcode, with affected versions from unknown earlier than or equal to 2.7.1. Connected document...

CVE-2025-58653 WordPress JSM file_get_contents() Shortcode Plugin <= 2.7.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JS Morisset JSM filegetcontents Shortcode wp-file-get-contents allows Stored XSS.This issue affects JSM filegetcontents Shortcode: from n/a through = 2.7.1...

CVE-2025-58653 WordPress JSM file_get_contents() Shortcode Plugin <= 2.7.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JS Morisset JSM filegetcontents Shortcode wp-file-get-contents allows Stored XSS.This issue affects JSM filegetcontents Shortcode: from n/a through = 2.7.1...

SUSE CVE-2022-50312

In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just returning directly...

Linux Distros Unpatched Vulnerability : CVE-2022-50312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just returning directly. CVE-2022-50312 Note that Nessus relies on the...