267 matches found
EUVD-2025-4013
Malicious code in bioql PyPI...
EUVD-2025-5123
Malicious code in bioql PyPI...
Malicious code in test-mlw2-surge-tiles (npm)
The package test-mlw2-surge-tiles was found to contain malicious code...
MAL-2025-36376 Malicious code in test-mlw2-surge-tiles (npm)
The package test-mlw2-surge-tiles was found to contain malicious code...
Malicious code in sap.ushell.components.tiles.utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c610571a96a422fc7b583bd55f4996dc51b894fe4d4a8cf415f7ebf1be5caf7 Any computer that has this package installed or running should be considered...
Description of the security update for SharePoint Enterprise Server 2016: June 10, 2025 (KB5002732)
None None...
CVE-2022-4827
The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2020-14962
Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title aka imageTitle or Caption aka description field of an image to wp-admin/admin-ajax.php...
Description of the security update for SharePoint Enterprise Server 2016: May 13, 2025 (KB5002722)
None None...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: April 8, 2025 (KB5002682)
None None...
CVE-2024-6261
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'FinalTilesGallery' shortcode in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...
WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.0...
CVE-2025-25073
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vasilis Triantafyllou Easy WP Tiles easy-wp-tiles allows Stored XSS.This issue affects Easy WP Tiles: from n/a through = 1...
CVE-2025-25073
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vasilis Triantafyllou Easy WP Tiles easy-wp-tiles allows Stored XSS.This issue affects Easy WP Tiles: from n/a through = 1...
CVE-2025-25073 WordPress Easy WP Tiles plugin <= 1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vasilis Triantafyllou Easy WP Tiles easy-wp-tiles allows Stored XSS.This issue affects Easy WP Tiles: from n/a through = 1...
CVE-2025-25073 WordPress Easy WP Tiles plugin <= 1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vasilis Triantafyllou Easy WP Tiles allows Stored XSS. This issue affects Easy WP Tiles: from n/a through 1...
CVE-2025-25073
CVE-2025-25073 describes a Stored XSS in Easy WP Tiles for WordPress, caused by improper input neutralization during web page generation. Affected: Easy WP Tiles versions n/a through 1. The provided documents do not include exploitation details or a confirmed patch/remediation version. Related so...
PT-2025-5912 · WordPress · Easy Wp Tiles
Name of the Vulnerable Software and Affected Versions: Easy WP Tiles versions n/a through 1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicio...
WordPress plugin Easy WP Tiles 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...