EUVD-2025-21026

Malicious code in bioql PyPI...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

MPGram Web 跨站脚本漏洞

MPGram Web is a lightweight telegram based web client from the individual developer Arman Jussupgaliyev. MPGram Web suffers from a cross-site scripting vulnerability that stems from susceptibility to a cross-site scripting attack in which an attacker can execute arbitrary Javascript in the contex...

PT-2025-29149 · Unknown · Mpgram-Web

Name of the Vulnerable Software and Affected Versions: mpgram-web commit 94baadb Description: A cross-site scripting XSS issue exists in the /master/login.php component. This allows attackers to execute arbitrary Javascript in the context of a user's browser using a crafted payload...

CVE-2025-45662

CVE-2025-45662 affects mpgram-web (commit 94baadb) with a vulnerability in /master/login.php enabling cross-site scripting (XSS). An attacker can inject arbitrary Javascript in the victim’s browser. Documented impact: JavaScript execution in user context; CVSSv3.1 base score 6.1 (Medium) with net...