EUVD-2023-43712

Malicious code in bioql PyPI...

CVE-2023-3021

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3020

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3020

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3020

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3020: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3021: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3020

CVE-2023-3020 affects the web app i-librarian-free (GitHub: mkucej/i-librarian-free) and is a reflected Cross-site Scripting (XSS) vulnerability present in versions prior to 5.10.4 . The issue arises from reflecting unsanitized user input in the search/query flow (evidenced by “Reflected XSS at s...

PT-2023-22582

Name of the Vulnerable Software and Affected Versions mkucej/i-librarian-free versions prior to 5.10.4 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which will be executed by the user's browser. No...