EUVD-2022-46278

Malicious code in bioql PyPI...

EUVD-2025-29388

Malicious code in bioql PyPI...

EUVD-2025-30525

Malicious code in bioql PyPI...

EUVD-2025-26957

Malicious code in bioql PyPI...

EUVD-2024-21005

Malicious code in bioql PyPI...

WordPress plugin Carousel Ultimate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38941

Name of the Vulnerable Software and Affected Versions Themepoints Carousel Ultimate versions through 1.8 Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This issue enables malicious code...

CVE-2025-58820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects Carousel Ultimate: from n/a through = 1.8...

CVE-2025-58820 WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects Carousel Ultimate: from n/a through = 1.8...

WordPress Dropcaps Shortcode and Widget plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Dropcaps Shortcode and Widget versions = 1.8...

Exploit for Cross-site Scripting in Totvs Fluig

FLUIG-Vulnerabilidade-CVE-2023-6275 Nov 24, 2023 — A vulnerabi...

CVE-2025-57891 WordPress Recurring PayPal Donations Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpecommerce Recurring PayPal Donations allows Stored XSS. This issue affects Recurring PayPal Donations: from n/a through 1.8...

CVE-2025-57891

CVE-2025-57891 affects the WordPress plugin “Recurring PayPal Donations” (wpecommerce) up to version 1.8. Root cause: improper neutralization of input during web page generation, enabling Stored Cross-Site Scripting (XSS). Impact as stated: stored XSS; exploitation status not detailed in the prov...

Linux Distros Unpatched Vulnerability : CVE-2025-8736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the...

WordPress plugin Recurring PayPal Donations 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

PT-2025-34355 · Unknown · Wpecommerce Recurring Paypal Donations

Name of the Vulnerable Software and Affected Versions: wpecommerce Recurring PayPal Donations versions through 1.8 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update...

CVE-2025-49436

CVE-2025-49436 is associated with a WordPress Custom Menu plugin vulnerability reported in connected documents as a stored cross-site scripting (XSS) issue affecting the Custom Menu plugin up to version 1.8. The technical detail from the connected sources indicates that the flaw originates from i...

CVE-2025-49436 WordPress Custom Menu plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thiudis Custom Menu allows Stored XSS. This issue affects Custom Menu: from n/a through 1.8...

cflow-1.8-2.1 on GA media (moderate)

cflow-1.8-2.1 on GA media Announcement ID: openSUSE-SU-2025:15459-1 Rating: moderate Cross-References: CVE-2023-6031 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the cflow-1.8-2.1 package o...

CVE-2025-52788

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Russell Jamieson CaptionPix captionpix allows Reflected XSS.This issue affects CaptionPix: from n/a through = 1.8...