EUVD-2025-7266

Malicious code in bioql PyPI...

CVE-2025-30345: Improper Encoding or Escaping of Output

An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chatgroup.create action, the user is able to specify the name of the chat. Some HTML elements such as SCRIPT are filtered, whereas others are not. In most cases, HTML entities are encoded properly, but not when...

PT-2025-12397

Name of the Vulnerable Software and Affected Versions OpenSlides versions prior to 4.2.5 Description An issue was discovered in OpenSlides where users can specify the name of the chat when creating new chats via the chat group.create action. Some HTML elements are filtered, but others are not, an...

CVE-2025-30345

An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chatgroup.create action, the user is able to specify the name of the chat. Some HTML elements such as SCRIPT are filtered, whereas others are not. In most cases, HTML entities are encoded properly, but not when...

CVE-2025-30345

OpenSlides CVE-2025-30345 affects OpenSlides versions prior to 4.2.5. The vulnerability arises in the chat_group.create action: while some HTML elements (e.g., SCRIPT) are filtered, others are not, and HTML entities are not consistently encoded when deleting chats or deleting messages, potentiall...