EUVD-2025-29267

Malicious code in bioql PyPI...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

Usha InformatiqueC WhatACart Cross-Site Scripting Vulnerability

Usha InformatiqueC WhatACart is an open source online e-commerce solution from Usha InformatiqueC built on the Yii2 framework. A cross-site scripting vulnerability exists in Usha InformatiqueC WhatACart version v2.0.7, which stems from cross-site scripting contained in the component...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

PT-2023-33025 · Npm +1 · Cookie-Session +1

Name of the Vulnerable Software and Affected Versions: Vendure affected versions not specified Description: The issue concerns the default cookie settings in Vendure, an e-commerce GraphQL framework, which are insecure due to the SameSite setting being false by default. This setting originates fr...