CVE-2026-13048

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

CVE-2026-13048

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

CVE-2026-13048 Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

CVE-2026-13048

Data::MuForm::Localizer for Perl (through v0.05) is vulnerable. load_lexicon constructs catalog paths using Messages/$lang.po without validating bare locale tags, enabling ../ path traversal and loading of arbitrary .po files. While parsing, the code evaluates header-derived content (Plural-Forms...

EUVD-2026-58117

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

EUVD-2008-1974

Malware in sbrugna...

Malicious code in abakuc-localizer (npm)

The package abakuc-localizer was found to contain malicious code...

MAL-2025-13943 Malicious code in abakuc-localizer (npm)

The package abakuc-localizer was found to contain malicious code...

MAL-2024-11472 Malicious code in thd-localizer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in thd-localizer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mep-widget-localizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f310734c8e72d28f8d9892e831726d172b517373a6c79419ca315bb718bf7013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4555 Malicious code in mep-widget-localizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f310734c8e72d28f8d9892e831726d172b517373a6c79419ca315bb718bf7013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-7791

CVE-2020-7791 affects the i18n package before 2.1.15. Root cause: insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs. Impact: Denial of service ( DoS ), including a null pointer dereference per Veracode reference, with condi...

pbskids.org XSS vulnerability

Vulnerable URL: http://pbskids.org/tvschedules/localizer.html?dest=/daniel/games/=2=st=yimage=defaultgotitle==/daniel/games/=DTIGid="...

Amazon Affiliate Link Localizer <= 1.8.2 - amazon_affiliate_link_localizer.php amzn_com Parameter XSS

The amazon-affiliate-link-localizer WordPress plugin was affected by an amazonaffiliatelinklocalizer.php amzncom Parameter XSS security vulnerability...

WordPress Amazon Affiliate Link Localizer Plugin <= 1.8.2 - XSS

This plugin is prone to a cross site scripting vulnerability in amazonaffiliatelinklocalizer.php amzncom parameter. Solution Update the plugin...

WordPress Amazon Affiliate Link Localizer Plugin <= 1.8.2 - XSS

This plugin is prone to a cross site scripting vulnerability in amazonaffiliatelinklocalizer.php amzncom parameter. Solution Update the plugin...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Drupal modules 1 Internationalization i18n 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and 2 Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecifie...

CVE-2008-1976

Multiple cross-site scripting XSS vulnerabilities in the Drupal modules 1 Internationalization i18n 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and 2 Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecifie...

CVE-2008-1976

CVE-2008-1976 describes multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1; and Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11. The flaws allow remote attackers to inject arbitrar...