EUVD-2023-40200

Malicious code in bioql PyPI...

EUVD-2023-40199

Malicious code in bioql PyPI...

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36222

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function...

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36222

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function...

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36222

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function...

Cross site scripting

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

CVE-2023-36222

CVE-2023-36222 (mlogclub/bbs-go) is a Cross Site Scripting vulnerability affecting v3.5.5 and earlier. The issue arises in the comment parameter of the article function, where crafted input can be echoed to the front end, allowing a remote attacker to execute arbitrary code via XSS. Several conne...

CVE-2023-36223

CVE-2023-36223 is a Cross Site Scripting (XSS) vulnerability in mlogclub/bbs-go prior to 3.5.5. The root cause is improper escaping in the announcements parameter within the settings function, allowing a remote attacker to inject and execute script code in a victim’s browser. Multiple connected s...

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

PT-2023-25489 · Mlogclub · Bbs-Go

Name of the Vulnerable Software and Affected Versions: mlogclub bbs-go versions 3.5.5 and before Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function. This enables the attacker to perform Cross Site...