CVE-2026-37710

Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function...

EUVD-2026-67774

Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function...

CVE-2026-37710

CVE-2026-37710 is a cross-site scripting (XSS) vulnerability in Omeka S v.4.2.0 , triggered through the site navigation custom URL function , allowing a remote attacker to execute arbitrary code with user interaction. The CNA-assigned CVSS 3.1 score is 6.1 (Medium) with a changed scope, reflectin...

CVE-2026-37710

Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function...

CVE-2023-4158

Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.3...

CVE-2023-4560

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...

CVE-2023-4159

Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3...

EUVD-2021-13586

Malware in sbrugna...

EUVD-2018-5366

Malware in sbrugna...

EUVD-2023-44605

Malicious code in bioql PyPI...

EUVD-2023-54415

Malicious code in bioql PyPI...

EUVD-2023-2282

Malicious code in bioql PyPI...

EUVD-2023-54037

Malicious code in bioql PyPI...

EUVD-2023-44606

Malicious code in bioql PyPI...

EUVD-2023-54416

Malicious code in bioql PyPI...

EUVD-2023-54038

Malicious code in bioql PyPI...

EUVD-2023-44604

Malicious code in bioql PyPI...

CVE-2023-4157

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...

CVE-2023-3981

Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...

CVE-2023-3982

Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...