EUVD-2022-42877

Malicious code in bioql PyPI...

CVE-2022-3506

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

CVE-2022-3506 Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

CVE-2022-3506 Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp

Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...

CVE-2022-3506

CVE-2022-3506 corresponds to a stored XSS vulnerability in the WordPress Related Posts plugin (rp4wp) prior to version 2.1.3. Multiple connected sources confirm the flaw in the rp4wp[heading_text] parameter where unsanitized user input can inject arbitrary script, potentially compromising cookies...