CVE-2022-20617

creationtimestamp| type| source ---|---|--- 2025-08-21 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwwto2ud5r2t...

MAL-2025-15165 Malicious code in available-slug (npm)

The package available-slug was found to contain malicious code...

MAL-2025-7468 Malicious code in @crabas0npm/quae-voluptates-sed-veritatis (npm)

The package @crabas0npm/quae-voluptates-sed-veritatis was found to contain malicious code...

Malicious code in available-slug (npm)

The package available-slug was found to contain malicious code...

MAL-2025-37002 Malicious code in to-slug (npm)

The package to-slug was found to contain malicious code...

Malicious code in to-slug (npm)

The package to-slug was found to contain malicious code...

artery-routes-docs (>=0.0.2, <=0.0.25), arteryjs (0.0.0) +5 more potentially affected by unknown CVE via to-slug (0.0.0)

to-slug NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-slug and may be impacted: - artery-routes-docs =0.0.2, =0.2.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37002...

CVE-2025-8975 givanz Vvveb edit.tpl cross site scripting

A vulnerability was identified in givanz Vvveb up to 1.0.5. This affects an unknown part of the file admin/template/content/edit.tpl. The manipulation of the argument slug leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

CVE-2025-8975

CVE-2025-8975 affects givanz Vvveb up to 1.0.5, where the slug parameter is mishandled in the file admin/template/content/edit.tpl, enabling cross-site scripting. The issue can be exploited remotely and the exploit has been disclosed publicly. A fix is available in version 1.0.6; patch hash: 84c1...

Vvveb 代码注入漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. A code injection vulnerability exists in Vvveb 1.0.5 and earlier versions, which stems from cross-site scripting due to incorrect manipulation of the parameter slug in the...

CVE-2025-6540

The web-cam plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above,...

CVE-2025-6540

The web-cam plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above,...

CVE-2025-6540

CVE-2025-6540 relates to the WordPress plugin “web-cam” (versions up to 1.0). It is a Stored Cross-Site Scripting (Stored XSS) vulnerability via the slug parameter caused by insufficient input sanitization and output escaping. Exploitation requires at least Contributor-level authentication, and t...

CVE-2025-6540 web-cam <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter

The web-cam plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above,...

CVE-2025-6540 web-cam <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter

The web-cam plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above,...

CVE-2024-30536

Cross-Site Request Forgery CSRF vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a through 2.6.7...

CVE-2023-26515

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ko Takagi Simple Slug Translate plugin = 2.7.2 versions...

CVE-2023-44238

Cross-Site Request Forgery CSRF vulnerability in Joakim Ling Remove slug from custom post type plugin = 1.0.3 versions...

CVE-2023-27581

github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workflow. Starting in version 4.0.0 and prior to version 4.4.1, this action uses the github.headref parameter in an insecure way. This vulnerability can be triggered by any user on...

CVE-2021-4410

The Qtranslate Slug plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.18. This is due to missing or incorrect nonce validation on the savepostdata function. This makes it possible for unauthenticated attackers to save post data via a forged...