Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting

WordPress Marmoset Viewer plugin before 1.9.3 contains a cross-site scripting vulnerability. It does not property sanitize, validate, or escape the 'id' parameter before outputting back in the page. id: CVE-2021-24495 info: name: Wordpress Marmoset Viewer 1.9.3 - Cross-Site Scripting author:...

CVE-2025-23767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revoxis Marmoset Viewer marmoset-viewer allows Stored XSS.This issue affects Marmoset Viewer: from n/a through = 1.9.3...

EUVD-2025-117413

Malicious code in endless-indigo-marmoset npm...

EUVD-2025-117401

Malicious code in excited-beige-marmoset npm...

EUVD-2025-101190

Malicious code in usedmarmosetz3n npm...

EUVD-2025-99757

Malicious code in disturbedmarmosetz3n npm...

EUVD-2025-100251

Malicious code in constitutionalmarmosetz3n npm...

EUVD-2025-102016

Malicious code in survivingmarmosetz3n npm...

Malicious code in constitutional_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f96b5cb2c8c0bc638d29acc98cdf271819a5061d0947b54a0e4f54ecbdbea71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130389 Malicious code in surviving_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac5a870611b201e75bb5db8334217a55906329aa4116a17655089f4decd9908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106348

Malicious code in boldmarmosetz3n npm...

EUVD-2025-95494

Malicious code in querulousmarmosetz3n npm...

EUVD-2025-105981

Malicious code in correspondingmarmosetz3n npm...

MAL-2025-122806 Malicious code in querulous_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d417551f4f1df326e11e36522cd7b44488d8a5bdf1551056c9d9938ac3cb13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88897

Malicious code in scornfulmarmosetz3n npm...

EUVD-2025-87573

Malicious code in youthfulmarmosetz3n npm...

EUVD-2025-87946

Malicious code in vocationalmarmosetz3n npm...

Malicious code in youthful_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e455d68110e5596773fdc17dc21364f912544121401c8957bf8a360dc99bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-89411

Malicious code in protectivemarmosetz3n npm...

EUVD-2025-92121

Malicious code in excitedmarmosetz3n npm...