EUVD-2022-7487

Malicious code in bioql PyPI...

EUVD-2023-2992

Malicious code in bioql PyPI...

EUVD-2022-1516

Malicious code in bioql PyPI...

EUVD-2025-23365

Malicious code in bioql PyPI...

EUVD-2023-3087

Malicious code in bioql PyPI...

EUVD-2023-3272

Malicious code in bioql PyPI...

EUVD-2023-3258

Malicious code in bioql PyPI...

EUVD-2022-0659

Malicious code in bioql PyPI...

EUVD-2025-7548

Malicious code in bioql PyPI...

EUVD-2022-0782

Malicious code in bioql PyPI...

EUVD-2022-3157

Malicious code in bioql PyPI...

EUVD-2022-5915

Malicious code in bioql PyPI...

EUVD-2022-1374

Malicious code in bioql PyPI...

EUVD-2023-0763

Malicious code in bioql PyPI...

EUVD-2023-1277

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization due to malicious scripts being injected into user profile fields, which execute in admin browsers...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting XSS. The vulnerability is due to improper input validation due to the last name field in the /projects/profile homepage endpoint allowing injection of malicious scripts...

Reflected Cross Site Scripting (XSS)

microweber/microweber is vulnerable to Reflected Cross-Site Scripting XSS. The vulnerability is due to improper validation of the layout parameter on the /admin/page/create page, which allows arbitrary JavaScript execution in the context of authenticated admin users...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to Cross-site Scripting XSS. The vulnerability is due to the id parameter in the liveedit.modulesettings API endpoint allowing arbitrary JavaScript execution...

CVE-2025-51502

Reflected Cross-Site Scripting XSS in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScript execution in the context of authenticated admin users...