CVE-2026-15753 zhinianboke xianyu-auto-reply review approve trusting http permission methods on the server side

A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?action=approve. Executing a manipulation can lead to trusting http permission methods on the server side. The attack ma...

CVE-2026-15753

CVE-2026-15753 affects zhinianboke xianyu-auto-reply on Server; the vulnerability concerns the /api/v1/payment/withdraw/review?action=approve endpoint where manipulation can cause the server to trust HTTP permission methods. The patch 19fc3282a1bb78a05c34945c088525d20e081cbd is referenced as a fi...

EUVD-2025-30839

Malicious code in bioql PyPI...

Localize: XSS & HTML injection

Link: http://www.localize.io/review/3C/languages/3 while approving and reviewing a phrase, you are able to send/set a message. You can XSS that by entering an XSS string String used: ? Screenshot: http://prntscr.com/3awo2p...