EUVD-2025-24891

Malicious code in bioql PyPI...

EUVD-2025-26903

Malicious code in bioql PyPI...

CVE-2025-58874

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in josepsitjar StoryMap wp-storymap allows DOM-Based XSS.This issue affects StoryMap: from n/a through = 2.1...

CVE-2025-58874

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in josepsitjar StoryMap wp-storymap allows DOM-Based XSS.This issue affects StoryMap: from n/a through = 2.1...

CVE-2025-58874 WordPress StoryMap Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in josepsitjar StoryMap allows DOM-Based XSS. This issue affects StoryMap: from n/a through 2.1...

CVE-2025-58874

CVE-2025-58874 concerns the WordPress StoryMap plugin. The provided documents describe a DOM-based XSS caused by improper input neutralization during web page generation, affecting StoryMap versions n/a through 2.1. Exploitation status is not specified in the sources. The recommended remediation ...

CVE-2025-58874 WordPress StoryMap Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in josepsitjar StoryMap wp-storymap allows DOM-Based XSS.This issue affects StoryMap: from n/a through = 2.1...

WordPress StoryMap Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin StoryMap versions = 2.1...

WordPress plugin StoryMap 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-52797

Cross-Site Request Forgery CSRF vulnerability in josepsitjar StoryMap wp-storymap allows SQL Injection.This issue affects StoryMap: from n/a through = 2.1...

CVE-2025-52797

Cross-Site Request Forgery CSRF vulnerability in josepsitjar StoryMap wp-storymap allows SQL Injection.This issue affects StoryMap: from n/a through = 2.1...

CVE-2025-52797 WordPress StoryMap Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in josepsitjar StoryMap wp-storymap allows SQL Injection.This issue affects StoryMap: from n/a through = 2.1...

CVE-2025-52797 WordPress StoryMap Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in josepsitjar StoryMap allows SQL Injection. This issue affects StoryMap: from n/a through 2.1...

CVE-2025-52797

CVE-2025-52797 corresponds to a CSRF vulnerability in the WordPress StoryMap Plugin &lt;= 2.1 that may enable SQL injection. Public documents confirm affected software (StoryMap Plugin), and version

WordPress StoryMap Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by astra.r3verii in WordPress Plugin StoryMap versions = 2.1...

WordPress plugin StoryMap 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2025-33366 · Storymap · Storymap

Name of the Vulnerable Software and Affected Versions: StoryMap versions through 2.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in StoryMap, which also allows for SQL Injection. Recommendations: At the moment, there is no information about a newer version that contains a...