Malicious code in you-test-vue2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2920 Malicious code in you-test-vue2 (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Are you robot google recaptcha for Wordpress plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Are you robot google recaptcha for wordpress versions = 2.2...

MAL-2025-2479 Malicious code in you-test-vue5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec32cca6168cf6f67a5387e271049dd0d253af0be7055afd2b80f4d2fab43b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-vue7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c757875559b50fa37d08dc9161180f45f2808ab8bd6a0b31113202496811eb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2480 Malicious code in you-test-vue6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fd4454397046cf8aeef6561fc90938310a1172cee3cbb872c07bbddcbe909ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-test-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a9b3aed0c3abe33ee85f5fc9b7c0dd8020835cb6f1c038f1f6dd6822561a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-vue6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fd4454397046cf8aeef6561fc90938310a1172cee3cbb872c07bbddcbe909ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-vue5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec32cca6168cf6f67a5387e271049dd0d253af0be7055afd2b80f4d2fab43b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2481 Malicious code in you-test-vue7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c757875559b50fa37d08dc9161180f45f2808ab8bd6a0b31113202496811eb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin QMean – WordPress Did You Mean 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin QMean - WordPress Did You Mean 2.0 an...

CVE-2024-54951

Monica 4.1.2 is vulnerable to Cross Site Scripting XSS. A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS...

Monica 安全漏洞

Monica is an AI assistant from Monica Inc. A security vulnerability exists in Monica version 4.1.2 that originates from a malicious user being able to create a contact that is formatted incorrectly and use it in the HOW YOU MET customization option to trigger cross-site scripting...

PT-2025-6719 · Monica · Monica

Name of the Vulnerable Software and Affected Versions: Monica version 4.1.2 Description: The issue allows a malicious user to create a malformed contact and use it in the "HOW YOU MET" customization options to trigger Cross Site Scripting XSS. Recommendations: For Monica version 4.1.2, as a...

CVE-2025-23713

Cross-Site Request Forgery CSRF vulnerability in artanik Hack me if you can hack-me-if-you-can allows Stored XSS.This issue affects Hack me if you can: from n/a through = 1.2...

CVE-2025-23713 WordPress Hack me if you can plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Artem Anikeev Hack me if you can allows Stored XSS.This issue affects Hack me if you can: from n/a through 1.2...

CVE-2025-23713

The connected Red Hat advisory for CVE-2025-23713 confirms a Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in the Hack me if you can plugin/app (affected range: from n/a through 1.2). The description in the CVE entry itself also notes a CSRF to Stored XSS vulnerab...

WordPress plugin Contact Form 7 Redirect & Thank You Page 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress plugin Ultimate YouTube Video & Shorts Player With Vimeo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress Contact Form 7 Redirect & Thank You Page plugin <= 1.0.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Le Ngoc Anh in WordPress Plugin Contact Form 7 Redirect & Thank You Page versions = 1.0.6...