EUVD-2025-4316

Malicious code in bioql PyPI...

CVE-2025-27330 WordPress PlayerJS plugin <= 2.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PlayerJS PlayerJS playerjs allows DOM-Based XSS.This issue affects PlayerJS: from n/a through = 2.23...

CVE-2025-27330

CVE-2025-27330 describes a DOM-based XSS in the WordPress plugin PlayerJS up to version 2.23, due to improper input neutralization during web page generation. The vulnerability affects PlayerJS and can be triggered by user-supplied input processed on the client side. The CVSS 3.1 score is 6.5 (Me...