3 matches found
EUVD-2025-30476
Malicious code in bioql PyPI...
5.4CVSS5.8AI score0.00259EPSS
SaveExploits1References3
CVE-2025-57205
iNiLabs School Express SMS Express 6.2 is affected by a Stored Cross-Site Scripting XSS vulnerability in the content-management features available to authenticated admin users. The vulnerability resides in POSTed editor parameters submitted to the /posts/edit/id endpoint and similarly in Notice a...
5.4CVSS0.00259EPSS
SaveExploits1References2
CVE-2025-57205
iNiLabs School Express (SMS Express) version 6.2 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within its content-management features. The issue stems from insufficient input sanitization and output encoding of POSTed editor parameters submitted to the /posts/edit/{id} endpoint, as we...
5.4CVSS6.7AI score0.00259EPSS
SaveExploits1References2Affected Software1
20