Malicious Package

Overview storefront-search-as-you-type is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2003-0551

Malware in sbrugna...

EUVD-2008-1348

Malware in sbrugna...

EUVD-2005-0937

Malware in sbrugna...

EUVD-2005-0936

Malware in sbrugna...

EUVD-2020-1427

Malware in sbrugna...

EUVD-2020-29077

Malware in sbrugna...

EUVD-2007-2063

Malware in sbrugna...

EUVD-2020-7212

Malware in sbrugna...

EUVD-2025-5544

Malicious code in bioql PyPI...

EUVD-2024-54174

Malicious code in bioql PyPI...

EUVD-2025-26025

Malicious code in bioql PyPI...

EUVD-2022-32004

Malicious code in bioql PyPI...

EUVD-2025-5720

Malicious code in bioql PyPI...

EUVD-2023-43969

Malicious code in bioql PyPI...

EUVD-2024-26085

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview shopware/storefront is a storefront for Shopware. Affected versions of this package are vulnerable to Cross-site Scripting XSS via inadequate input validation in the activeRouteParameters variable at the /page/cms/ and /widget/cms/ endpoints. An attacker can execute arbitrary JavaScript...

CVE-2025-48353

Cross-Site Request Forgery CSRF vulnerability in dactum Clickbank WordPress Plugin Niche Storefront clickbank-niche-storefronts allows Stored XSS.This issue affects Clickbank WordPress Plugin Niche Storefront: from n/a through = 1.3.5...

CVE-2025-48353 WordPress Clickbank WordPress Plugin (Niche Storefront) plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dactum Clickbank WordPress Plugin Niche Storefront allows Stored XSS. This issue affects Clickbank WordPress Plugin Niche Storefront: from n/a through 1.3.5...

CVE-2025-48353

CVE-2025-48353 : A CSRF to Stored XSS vulnerability exists in the dactum Clickbank WordPress Plugin (Niche Storefront). Affected component: Clickbank WordPress Plugin (Niche Storefront) versions up to and including 1.3.5. Root cause: CSRF enables stored XSS in the plugin; exploitation details are...