6 matches found
CVE-2026-56127
pfSense Plus before 26.07 and pfSense CE before 2.9.0 are affected by a stored XSS in /firewall_rules_edit.php. An authenticated user holding the Firewall: Rules: Edit privilege can inject arbitrary JavaScript via the descr parameter. The rule description is persisted in the pfSense XML configura...
EUVD-2025-11952
Malicious code in bioql PyPI...
QMarkdown Cross-Site Scripting (XSS) vulnerability
QMarkdown aka quasar-ui-qmarkdown before 2.0.5 allows XSS via headers even when when no-html is set...
CVE-2025-43954
QMarkdown aka quasar-ui-qmarkdown before 2.0.5 allows XSS via headers even when when no-html is set...
CVE-2025-43954
QMarkdown (quasar-ui-qmarkdown) before 2.0.5 is affected: it allows XSS via headers even when the no-html option is set. Affected versions are prior to 2.0.5. Remediation: upgrade to 2.0.5 or later (or apply vendor-provided patches). Exploitation details and in-the-wild status are not described i...
