EUVD-2025-17266

Malicious code in bioql PyPI...

CVE-2025-49299

CVE-2025-49299 is a Stored XSS in WebHotelier for WordPress (WebHotelier) affecting up to version 1.9.2 . The root cause is improper input neutralization during web page generation . The vulnerability is noted as patched in version 1.9.2 ; CVSSv3.1 base score is 6.5 (Medium) . Action: upgrade to ...