8 matches found
CVE-2025-23669
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nurul Amin WP Smart Tooltip wp-smart-tool-tip allows Stored XSS.This issue affects WP Smart Tooltip: from n/a through = 1.0.0...
EUVD-2025-3329
Malicious code in bioql PyPI...
CVE-2025-23669
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nurul Amin WP Smart Tooltip wp-smart-tool-tip allows Stored XSS.This issue affects WP Smart Tooltip: from n/a through = 1.0.0...
CVE-2025-23669
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nurul Amin WP Smart Tooltip wp-smart-tool-tip allows Stored XSS.This issue affects WP Smart Tooltip: from n/a through = 1.0.0...
CVE-2025-23669 WordPress WP Smart Tooltip plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nurul Amin WP Smart Tooltip wp-smart-tool-tip allows Stored XSS.This issue affects WP Smart Tooltip: from n/a through = 1.0.0...
CVE-2025-23669
CVE-2025-23669 — Stored Cross-Site Scripting in WP Smart Tooltip (WordPress). Description: Improper neutralization of input during web page generation enabling stored XSS. Affected: WP Smart Tooltip versions up to 1.0.0 (vendor and product in description). CVSS v3.1 metrics: base score 6.5 (Vecto...
CVE-2025-23669 WordPress WP Smart Tooltip plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nurul Amin WP Smart Tooltip wp-smart-tool-tip allows Stored XSS.This issue affects WP Smart Tooltip: from n/a through = 1.0.0...
PT-2025-5008 · WordPress · Wp Smart Tooltip
Name of the Vulnerable Software and Affected Versions: WP Smart Tooltip versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means an attacker can inject malicious script...