CVE-2026-96647

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-91255

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96647 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lsd[remark]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96647

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 6.1.1 . The root cause is insufficient input sanitization and output escaping of the 'lsd[remark]' parameter. This a...

PT-2026-104146

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-19796 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-19796 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-19796: Improper Neutralization of Input During Web Page Generation

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...

WordPress Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'lsddisplstyle' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Listdom versions = 5.8.1...

[SECURITY] Fedora 43 Update: rust-lsd-1.2.0-8.fc43

An ls command with a lot of pretty colors and some other stuff...

[SECURITY] Fedora 44 Update: rust-lsd-1.2.0-8.fc44

An ls command with a lot of pretty colors and some other stuff...

[SECURITY] Fedora 42 Update: rust-lsd-1.2.0-3.fc42

An ls command with a lot of pretty colors and some other stuff...

[SECURITY] Fedora 43 Update: rust-lsd-1.2.0-3.fc43

An ls command with a lot of pretty colors and some other stuff...

lsd-1.2.0-1.1 on GA media (moderate)

lsd-1.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15628-1 Rating: moderate Cross-References: CVE-2025-5791 CVSS scores: CVE-2025-5791 SUSE : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2025-5791 SUSE : 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected...

OPENSUSE-SU-2025:15628-1 lsd-1.2.0-1.1 on GA media

These are all security issues fixed in the lsd-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2025-3492

Malicious code in bioql PyPI...

EUVD-2025-12031

Malicious code in bioql PyPI...

Malicious code in aspida-lsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acc2eb7e748df3c152fd014eb7b9ff3d3933451500a1ef3fd8af63811ed846de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6151 Malicious code in aspida-lsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acc2eb7e748df3c152fd014eb7b9ff3d3933451500a1ef3fd8af63811ed846de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-46502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bas Matthee LSD Custom taxonomy and category meta custom-taxonomy-category-and-term-fields allows Cross Site Request Forgery.This issue affects LSD Custom taxonomy and category meta: from n/a throu...