9 matches found
EUVD-2025-14758
Malicious code in bioql PyPI...
EUVD-2025-9102
Malicious code in bioql PyPI...
CVE-2025-31467
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in miro.mannino Flickr Photostream flickr-photostream allows Reflected XSS.This issue affects Flickr Photostream: from n/a through = 3.1.8...
CVE-2025-31467
CVE-2025-31467 concerns Flickr Photostream for WordPress, showing a Reflected XSS vulnerability in the Flickr Photostream plugin. The issue is described as an improper neutralization of input during web page generation and affects Flickr Photostream versions from n/a through 3.1.8. The CVE entry ...
CVE-2025-30589
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dourou Flickr set slideshows flickr-set-slideshows allows SQL Injection.This issue affects Flickr set slideshows: from n/a through = 0.9...
PT-2025-14715 · Unknown · Notfound Flickr Photostream
Name of the Vulnerable Software and Affected Versions: NotFound Flickr Photostream versions 3.1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions...
CVE-2025-30589
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dourou Flickr set slideshows flickr-set-slideshows allows SQL Injection.This issue affects Flickr set slideshows: from n/a through = 0.9...
CVE-2025-30589
CVE-2025-30589 describes an SQL Injection in Flickr set slideshows for WordPress, due to improper neutralization of SQL elements. Affected: Flickr set slideshows plugin (WordPress); versions from n/a through 0.9. Attack vector: authenticated (Subscriber+) access. Impact per entry: high confidenti...
PT-2025-14037 · Unknown · Notfound Flickr Set Slideshows
Name of the Vulnerable Software and Affected Versions: NotFound Flickr set slideshows versions 0.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...