EUVD-2025-3107

Malicious code in bioql PyPI...

EUVD-2024-45731

Malicious code in bioql PyPI...

EUVD-2024-20996

Malicious code in bioql PyPI...

EUVD-2024-35476

Malicious code in bioql PyPI...

EUVD-2025-5621

Malicious code in bioql PyPI...

EUVD-2025-5654

Malicious code in bioql PyPI...

EUVD-2025-11454

Malicious code in bioql PyPI...

EUVD-2025-11304

Malicious code in bioql PyPI...

EUVD-2025-11708

Malicious code in bioql PyPI...

UTCMS 安全漏洞

UTCMS is a content management system built on the UT framework by the individual developer of usaltool. A security vulnerability exists in UTCMS version 9, which stems from an improper comparison of the code parameter in the file app/modules/ut-frame/admin/login.php...

PT-2025-33845 · Flaskblog · Flaskblog

Name of the Vulnerable Software and Affected Versions: flaskBlog versions 2.8.0 and earlier Description: The application checks the userRole for "admin" privileges only when accessing the /admin page, but not its subroutes. Specifically, the check is performed in routes/adminPanel.py, but not in...

CVE-2024-52680

EyouCMS 1.6.7 is vulnerable to Cross Site Scripting XSS in /login.php?m=admin&c=System&a=web&lang=cn...

The vulnerability of the diskUsageBuildsStats component on the CI/CD application integration and delivery system’s page allows a hacker to execute cross-site scripting attacks.

The vulnerability of the diskUsageBuildsStats page in the Continuous Integration and Delivery Application System CI/CD of JetBrains TeamCity is related to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to execute cross-site...

CVE-2025-46383

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-48345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft Contact Form 7 Editor Button cf7-editor-button allows Reflected XSS.This issue affects Contact Form 7 Editor Button: from n/a through = 1.0.0...

CVE-2025-31427

CVE-2025-31427 describes a Reflected XSS in the Invico - WordPress Consulting Business Theme (designthemes Invico) due to improper input neutralization during web page generation. Affected software: Invico WordPress Theme 1.9) to fix the issue. Other sources identify the vulnerability as XSS wit...

CVE-2025-54013

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through = 2.11.16...

PT-2025-29767 · WordPress · Bplugins Lightbox Block

Name of the Vulnerable Software and Affected Versions: bPlugins LightBox Block versions through 1.1.30 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. This can lead to the execution of...

PT-2025-30104 · Ооо 'Шерпа Роботикс' · Sherpa Rpa

Уязвимость компонента Sherpa Orchestrator платформы для автоматизации процессов Sherpa RPA связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить межсайтовый скриптинг XSS путём отправки специально...

PT-2025-29766 · WordPress · Responsive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Addons for Elementor versions through 1.7.3 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...