EUVD-2023-59763

Malicious code in bioql PyPI...

CVE-2023-7303

A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function processrequest of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-7303

A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function processrequest of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-7303 q2apro q2apro-on-site-notifications q2apro-onsitenotifications-page.php process_request cross site scripting

A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function processrequest of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-7303

CVE-2023-7303 affects the q2apro project, specifically the q2apro-on-site-notifications plugin up to version 1.4.6. The vulnerability resides in the process_request function of q2apro-onsitenotifications-page.php and enables cross-site scripting, with remote initiation possible. The advisory note...

CVE-2023-7303 q2apro q2apro-on-site-notifications q2apro-onsitenotifications-page.php process_request cross site scripting

A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function processrequest of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-7303 q2apro q2apro-on-site-notifications q2apro-onsitenotifications-page.php process_request cross site scripting

A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function processrequest of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack...

q2apro-on-site-notifications 代码注入漏洞

q2apro-on-site-notifications is a plugin for q2apro individual developers that replaces all email notifications for forums. A code injection vulnerability exists in q2apro-on-site-notifications version 1.4.6 and earlier, which stems from improper handling of the processrequest function in the fil...

PT-2025-20299 · Q2Apro · Q2Apro

Name of the Vulnerable Software and Affected Versions: q2apro q2apro-on-site-notifications versions up to 1.4.6 Description: A problematic issue was found, affecting the process request function of the file q2apro-onsitenotifications-page.php. This leads to cross-site scripting and can be initiat...