EUVD-2025-28709

Malicious code in bioql PyPI...

CVE-2025-6258: Improper Neutralization of Input During Web Page Generation

The WP SoundSystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsstm-track shortcode in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...