218 matches found
EUVD-2023-27960
Malicious code in bioql PyPI...
EUVD-2025-15497
Malicious code in bioql PyPI...
EUVD-2025-30567
Malicious code in bioql PyPI...
CVE-2025-58248
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codefish Pinterest Pinboard Widget pinterest-pinboard-widget allows Stored XSS.This issue affects Pinterest Pinboard Widget: from n/a through = 1.0.7...
CVE-2025-58248
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codefish Pinterest Pinboard Widget pinterest-pinboard-widget allows Stored XSS.This issue affects Pinterest Pinboard Widget: from n/a through = 1.0.7...
WordPress Pinterest Pinboard Widget Plugin <= 1.0.7 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Pinterest Pinboard Widget versions = 1.0.7...
CVE-2025-58248 WordPress Pinterest Pinboard Widget Plugin <= 1.0.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codefish Pinterest Pinboard Widget pinterest-pinboard-widget allows Stored XSS.This issue affects Pinterest Pinboard Widget: from n/a through = 1.0.7...
CVE-2025-58248
CVE-2025-58248 documents a Stored XSS in the Pinterest Pinboard Widget for WordPress, affecting versions up to 1.0.7. The vulnerability stems from improper neutralization of input during web page generation, enabling a malicious payload to be stored and subsequently reflected to users. The provid...
CVE-2025-58248 WordPress Pinterest Pinboard Widget Plugin <= 1.0.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codefish Pinterest Pinboard Widget pinterest-pinboard-widget allows Stored XSS.This issue affects Pinterest Pinboard Widget: from n/a through = 1.0.7...
PT-2025-38911
Name of the Vulnerable Software and Affected Versions codefish Pinterest Pinboard Widget versions through 1.0.7 Description The codefish Pinterest Pinboard Widget contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This...
WordPress plugin Pinterest Pinboard Widget 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...
CVE-2025-39510
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...
Malicious code in pinterest-gestalt (npm)
The package pinterest-gestalt was found to contain malicious code...
MAL-2025-29311 Malicious code in pinterest-gestalt (npm)
The package pinterest-gestalt was found to contain malicious code...
Malicious code in pinterest-api-demo (npm)
The package pinterest-api-demo was found to contain malicious code...
MAL-2025-29310 Malicious code in pinterest-api-demo (npm)
The package pinterest-api-demo was found to contain malicious code...
CVE-2025-39510
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...
CVE-2025-39510 WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...
CVE-2025-39510 WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...
CVE-2025-39510
CVE-2025-39510 affects the WordPress plugin “Pinterest Automatic Pin” (ValvePress). The issue is an SQL Injection due to improper neutralization of inputs in the plugin prior to version 4.19.0. Affected versions are those before 4.19.0 (reported as