EUVD-2022-36100

Malicious code in bioql PyPI...

EUVD-2024-47453

Malicious code in bioql PyPI...

EUVD-2024-46124

Malicious code in bioql PyPI...

EUVD-2023-42416

Malicious code in bioql PyPI...

EUVD-2021-34630

Malicious code in bioql PyPI...

EUVD-2024-52154

Malicious code in bioql PyPI...

EUVD-2024-44892

Malicious code in bioql PyPI...

EUVD-2024-27195

Malicious code in bioql PyPI...

EUVD-2025-5406

Malicious code in bioql PyPI...

EUVD-2024-50035

Malicious code in bioql PyPI...

EUVD-2025-24753

Malicious code in bioql PyPI...

EUVD-2024-17713

Malicious code in bioql PyPI...

EUVD-2024-22194

Malicious code in bioql PyPI...

EUVD-2023-41742

Malicious code in bioql PyPI...

EUVD-2025-3854

Malicious code in bioql PyPI...

EUVD-2023-32415

Malicious code in bioql PyPI...

CVE-2025-11241

The Yoast SEO Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 25.7 to 25.9 due to a flawed regex used to remove an attribute in post content, which can be abused to inject arbitrary HTML attributes, including JavaScript event handlers. This vulnerability allo...

CVE-2025-11241

The CVE CVE-2025-11241 (Yoast SEO Premium for WordPress) is a stored XSS vulnerability affecting plugin versions 25.7–25.9. It stems from a flawed regex used to strip an attribute in post content, enabling an attacker with Contributor or higher rights to inject arbitrary HTML attributes, includin...

CVE-2025-11241 Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Yoast SEO Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 25.7 to 25.9 due to a flawed regex used to remove an attribute in post content, which can be abused to inject arbitrary HTML attributes, including JavaScript event handlers. This vulnerability allo...

CVE-2025-11241 Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Yoast SEO Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 25.7 to 25.9 due to a flawed regex used to remove an attribute in post content, which can be abused to inject arbitrary HTML attributes, including JavaScript event handlers. This vulnerability allo...