EUVD-2025-3365

Malicious code in bioql PyPI...

CVE-2025-23712

Cross-Site Request Forgery CSRF vulnerability in kapostintegrations Kapost kapost-byline allows Stored XSS.This issue affects Kapost: from n/a through = 2.2.9...

CVE-2025-23712

CVE-2025-23712 applies to Kapost (WordPress plugin) and describes a Cross-Site Request Forgery (CSRF) vulnerability that can lead to Stored Cross-Site Scripting (XSS). The entry indicates affected software Kapost from n/a up to version 2.2.9. The connected Red Hat advisory also references the sam...

PT-2025-5044 · Kapost · Kapost

Name of the Vulnerable Software and Affected Versions: Kapost versions n/a through 2.2.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker can perform actions on behalf of a user without their knowledge and can also injec...