3 matches found
EUVD-2025-7037
Malicious code in bioql PyPI...
6.8CVSS6.7AI score0.00408EPSS
SaveExploits1References2
CVE-2024-11850
A stored cross-site scripting XSS vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG...
6.8CVSS0.00408EPSS
SaveExploits1References1
CVE-2024-11850 Stored XSS in langgenius/dify
A stored cross-site scripting XSS vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG...
6.8CVSS6.8AI score
SaveExploits0References3
20