CVE-2025-23659

Cross-Site Request Forgery CSRF vulnerability in hernanjh MercadoLibre Integration mercadolibre-integration allows Stored XSS.This issue affects MercadoLibre Integration: from n/a through = 1.1...

Malicious code in ui-library_mercadolibre (npm)

The package ui-librarymercadolibre was found to contain malicious code...

MAL-2025-48514 Malicious code in ui-library_mercadolibre (npm)

The package ui-librarymercadolibre was found to contain malicious code...

EUVD-2014-5545

Malware in sbrugna...

EUVD-2025-3323

Malicious code in bioql PyPI...

Malicious code in mercadolibre-prueba-front (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e618c15b2fe0ed57d70ce007a41fcc579a49559db036719367d16367c00dc258 The OpenSSF Package Analysis project identified...

Malicious code in next-typescript-mercadolibre (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-23659

Cross-Site Request Forgery CSRF vulnerability in hernanjh MercadoLibre Integration mercadolibre-integration allows Stored XSS.This issue affects MercadoLibre Integration: from n/a through = 1.1...

CVE-2025-23659

Cross-Site Request Forgery CSRF vulnerability in hernanjh MercadoLibre Integration mercadolibre-integration allows Stored XSS.This issue affects MercadoLibre Integration: from n/a through = 1.1...

CVE-2025-23659

CVE-2025-23659 affects MercadoLibre Integration (WordPress plugin). The issue is CSRF that enables stored XSS. Affected version range listed as MercadoLibre Integration: from n/a through 1.1. The referenced Red Hat advisory confirms the same description. Reported CVSS v3.1 base score 7.1 (High). ...

CVE-2025-23659: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in hernanjh MercadoLibre Integration mercadolibre-integration allows Stored XSS.This issue affects MercadoLibre Integration: from n/a through = 1.1...

WordPress plugin MercadoLibre Integration 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

MercadoLibre: Sale cancellations from other sellers without restrictions

The summary is as follows: A vulnerability was reported that allowed sale cancellations from other sellers without restrictions. The issue was acknowledged and addressed by MercadoLibre...

MercadoLibre: Account Takeover / Arbitrary File read and deletion / Partial code execution (intent redirection)

The vulnerability allowed for account takeover, arbitrary file read and deletion, and partial code execution through intent redirection. MercadoLibre acknowledged the issue and worked on a fix internally...

MercadoLibre: Stored Cross-Site Scripting in mercadopago.com.ar

The summary is as follows: A stored cross-site scripting vulnerability was discovered in mercadopago.com.ar. The issue was acknowledged and addressed by MercadoLibre internally...

MercadoLibre: Stored XSS in reclamos

Stored XSS vulnerability was discovered in the reclamos section of MercadoLibre. The issue was reported by @valent1ne, who provided clear steps to reproduce the vulnerability and a proof-of-concept code. MercadoLibre acknowledged the issue and implemented a fix...

MercadoLibre: Reflected Cross Site Scripting

Reflected Cross Site Scripting was reported by @madara. A proof-of-concept code was provided to demonstrate the vulnerability. The issue was acknowledged and addressed internally by MercadoLibre...

inmuebles.mercadolibre.co.cr XSS vulnerability

Open Bug Bounty ID: OBB-712876 Description| Value ---|--- Affected Website:| inmuebles.mercadolibre.co.cr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

listado.mercadolibre.com.bo XSS vulnerability

Open Bug Bounty ID: OBB-712875 Description| Value ---|--- Affected Website:| listado.mercadolibre.com.bo Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

listado.mercadolibre.com.do XSS vulnerability

Open Bug Bounty ID: OBB-712870 Description| Value ---|--- Affected Website:| listado.mercadolibre.com.do Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...