EUVD-2022-27937

Malicious code in bioql PyPI...

EUVD-2025-5930

Malicious code in bioql PyPI...

EUVD-2024-52853

Malicious code in bioql PyPI...

EUVD-2025-14308

Malicious code in bioql PyPI...

EUVD-2023-49951

Malicious code in bioql PyPI...

EUVD-2023-36387

Malicious code in bioql PyPI...

EUVD-2022-1633

Malicious code in bioql PyPI...

EUVD-2022-47672

Malicious code in bioql PyPI...

EUVD-2025-32225

Malicious code in bioql PyPI...

EUVD-2024-44939

Malicious code in bioql PyPI...

EUVD-2023-35499

Malicious code in bioql PyPI...

EUVD-2023-45674

Malicious code in bioql PyPI...

EUVD-2025-19690

Malicious code in bioql PyPI...

EUVD-2025-25112

Malicious code in bioql PyPI...

EUVD-2025-22141

Malicious code in bioql PyPI...

EUVD-2025-3678

Malicious code in bioql PyPI...

CVE-2025-61597

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-61597

CVE-2025-61597 (Emlog) is a stored XSS vulnerability in Emlog 2.5.21 and earlier caused by HTML template injection in the mail template settings. In an authenticated admin session, saving a malicious payload can cause attacker‑controlled JavaScript to execute on subsequent visits to the settings ...