EUVD-2023-50221

Malicious code in bioql PyPI...

EUVD-2025-2656

Malicious code in bioql PyPI...

EUVD-2024-29838

Malicious code in bioql PyPI...

EUVD-2024-35218

Malicious code in bioql PyPI...

EUVD-2023-53674

Malicious code in bioql PyPI...

EUVD-2023-53713

Malicious code in bioql PyPI...

EUVD-2025-31071

Malicious code in bioql PyPI...

EUVD-2024-3098

Malicious code in bioql PyPI...

EUVD-2025-26006

Malicious code in bioql PyPI...

EUVD-2024-29840

Malicious code in bioql PyPI...

EUVD-2025-24183

Malicious code in bioql PyPI...

EUVD-2023-45227

Malicious code in bioql PyPI...

EUVD-2024-0531

Malicious code in bioql PyPI...

EUVD-2022-6565

Malicious code in bioql PyPI...

CVE-2025-59832

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s cookies/CSRF token, an...

CVE-2025-59832 Horrila Stored XSS Vulnerability via Ticket Comment section

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s cookies/CSRF token, an...

CVE-2025-59832 Horrila Stored XSS Vulnerability via Ticket Comment section

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s cookies/CSRF token, an...

PT-2025-39398

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 1.4.0 Description Horilla is a Human Resource Management System HRMS. A stored cross-site scripting XSS issue exists in the ticket comment editor for versions prior to 1.4.0. An authenticated user with limited...

CVE-2025-59525

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG and via allowed , which can be chained to execute JavaScript whenever users view impacted content e.g., announcements. This can...

CVE-2025-59524

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation for example, with an intercepting proxy or by...