EUVD-2025-23580

Malicious code in bioql PyPI...

CVE-2025-8535: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...