WordPress Post to Google My Business (Google Business Profile) plugin <= 3.1.28 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Post to Google My Business Google Business Profile versions = 3.1.28...

EUVD-2022-24775

Malicious code in bioql PyPI...

CVE-2022-1474

The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in an attribute on the event dashboard, leading to a Reflected Cross-Site Scripting...