EUVD-2022-3784

Malicious code in bioql PyPI...

com.liferay:com.liferay.journal.content.web (>=1.0.0 <=2.0.8), com.liferay:com.liferay.journal.item.selector.web (>=1.0.0 <=1.0.5) potentially affected by CVE-2025-43737 via com.liferay:com.liferay.journal.web (>=1.0.0 <=1.5.0)

com.liferay:com.liferay.journal.web MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.5 Source cves: CVE-2025-43737 Source advisory: SNYK:JAVA-COMLIFERAY-12089394...

WordPress Media Library Tools Plugin < 1.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Media Library Tools Type Plugin Vulnerable versions 1.5.0 Fixed in 1.5.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10482 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 79520509f6a4 Credits Bob Matyas Required...