EUVD-2025-21026

Malicious code in bioql PyPI...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

CVE-2025-45662

A cross-site scripting (XSS) vulnerability exists in the mpgram-web component, specifically affecting commit 94baadb . The flaw is located in the /master/login.php file, where improper neutralization of input during web page generation allows an attacker to execute arbitrary JavaScript in a user'...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

MPGram Web 跨站脚本漏洞

MPGram Web is a lightweight telegram based web client from the individual developer Arman Jussupgaliyev. MPGram Web suffers from a cross-site scripting vulnerability that stems from susceptibility to a cross-site scripting attack in which an attacker can execute arbitrary Javascript in the contex...

CVE-2025-45662: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...

PT-2025-29149 · Unknown · Mpgram-Web

Name of the Vulnerable Software and Affected Versions: mpgram-web commit 94baadb Description: A cross-site scripting XSS issue exists in the /master/login.php component. This allows attackers to execute arbitrary Javascript in the context of a user's browser using a crafted payload...

CVE-2025-45662

A cross-site scripting XSS vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...