8193 matches found
EUVD-2023-50117
Malicious code in bioql PyPI...
EUVD-2021-29081
Malicious code in bioql PyPI...
EUVD-2025-28805
Malicious code in bioql PyPI...
EUVD-2025-25900
Malicious code in bioql PyPI...
EUVD-2025-16662
Malicious code in bioql PyPI...
EUVD-2022-4057
Malicious code in bioql PyPI...
EUVD-2025-31694
Malicious code in bioql PyPI...
EUVD-2022-24673
Malicious code in bioql PyPI...
EUVD-2025-31215
Malicious code in bioql PyPI...
EUVD-2025-19254
Malicious code in bioql PyPI...
EUVD-2024-53436
Malicious code in bioql PyPI...
EUVD-2024-43068
Malicious code in bioql PyPI...
EUVD-2022-30762
Malicious code in bioql PyPI...
CVE-2025-9206
The Meks Easy Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title field in all version up to, and including, 2.1.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-9206
CVE-2025-9206 (Meks Easy Maps for WordPress) : A stored Cross-Site Scripting (XSS) vulnerability affects Meks Easy Maps plugin up to version 2.1.4. The issue arises from insufficient input sanitization and output escaping in the post title field, allowing authenticated users with contributor-leve...
CVE-2025-60782
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS stored Cross-Site Scripting XSS vulnerability in the topics management module topics.php. Attackers can inject malicious JavaScript payloads into the Titlefield during topic creation or updates...
CVE-2025-9206: Improper Neutralization of Input During Web Page Generation
The Meks Easy Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title field in all version up to, and including, 2.1.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-57423
A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...
CVE-2025-60782
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS stored Cross-Site Scripting XSS vulnerability in the topics management module topics.php. Attackers can inject malicious JavaScript payloads into the Titlefield during topic creation or updates...
