Advisories · Weakness
Code injection.
Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.3 Medium
itsourcecode POS Point of Sale System deferred_table.php cross site scripting
- itsourcecode POS Point of Sale System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Campcodes Grocery Sales and Inventory System index.php cross site scripting
- Campcodes Grocery Sales and Inventory System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
itsourcecode POS Point of Sale System complex_header_2.php cross site scripting
- itsourcecode POS Point of Sale System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
itsourcecode POS Point of Sale System 6776.php cross site scripting
- itsourcecode POS Point of Sale System
- Cross-site scripting (XSS)
- Code injection
- CVSS 7.3 High
Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost
- sizam REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme
- Code injection
- CVSS 8.1 High
Roo Code: Potential Remote Code Execution via .code-workspace
- RooCodeInc Roo-Code
- Code injection
- Broken access control
- CVSS 5.1 Medium
itsourcecode POS Point of Sale System 2512.php cross site scripting
- itsourcecode POS Point of Sale System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
itsourcecode POS Point of Sale System -complex_header.php cross site scripting
- itsourcecode POS Point of Sale System
- Cross-site scripting (XSS)
- Code injection
- CVSS 3.8 Low
WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability
- PickPlugins Job Board Manager
- Code injection
- CVSS 7.2 High
Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode
- kleor Easy Timer
- Code injection
- CVSS 7.2 High
atec Debug <= 1.2.22 - Authenticated (Administrator+) Remote Code Execution
- docjojo atec Debug
- Code injection
- CVSS 5.1 Medium
CodeAstro Real Estate Management System feature.php cross site scripting
- CodeAstro Real Estate Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
CodeAstro Real Estate Management System propertyview.php cross site scripting
- CodeAstro Real Estate Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Jinher OA POST Request login!changePassWord.action cross site scripting
- Jinher OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
code-projects Responsive Blog Site blogs_view.php cross site scripting
- code-projects Responsive Blog Site
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.1 Medium
Electron has ASAR Integrity Bypass via resource modification
- Code injection
- CWE-829
<35.7.5 || >=36.0.0-alpha.1, <36.8.1 || >=37.0.0-alpha.1, <37.3.1 || >=38.0.0-alpha.1, <38.0.0-beta.6 · fixed in 35.7.5, 36.8.1, 37.3.1, 38.0.0-beta.6
GHSA-vmqv-hx8q-j7mg · CVE-2025-55305 - CVSS 5.3 Medium
Campcodes Sales and Inventory System index.php cross site scripting
- Campcodes Sales and Inventory System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.0, no score published
Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning
- Code injection
<1.0.87 · fixed in 1.0.87
GHSA-ph6w-f82w-28w6 - CVSS 5.3 Medium
Campcodes Sales and Inventory System index.php cross site scripting
- Campcodes Sales and Inventory System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
code-projects POS Pharmacy System products.php cross site scripting
- code-projects POS Pharmacy System
- Cross-site scripting (XSS)
- Code injection
- CVSS 7.6 High
Sandbox escape in smolagents Local Python execution environment via dunder attributes
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
HTML Cache Poisoning through Unsafe Reflections
- Sitecore Experience Manager (XM)
- Sitecore Experience Platform (XP)
- Code injection
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Dive's improper processing of custom urls can lead to Remote Code Execution
- OpenAgentPlatform Dive
- Code injection
- CVSS 5.1 Medium
code-projects Fruit Shop Management System products.php cross site scripting
- code-projects Fruit Shop Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
PHPGurukul Small CRM registration.php cross site scripting
- PHPGurukul Small CRM
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting
- thinkgem JeeSite
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
RemoteClinic edit.php cross site scripting
- RemoteClinic
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Khanakag-17 Library Management System index.php cross site scripting
- Khanakag-17 Library Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Campcodes Online Hospital Management System Edit Profile edit-profile.php cross site scripting
- Campcodes Online Hospital Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Campcodes Online Hospital Management System Patient Search patient-search.php cross site scripting
- Campcodes Online Hospital Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Campcodes Hospital Management System Edit Doctor Specialization edit-doctor-specialization.php cross site scripting
- Campcodes Hospital Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile importmodel cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile statement cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile table cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile stat cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
givanz Vvveb login.tpl cross site scripting
- givanz Vvveb
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar edit cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile script cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile process cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile unit cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile form cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile script cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile form cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile appdict cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile agent cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile page cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)
- LabRedesCefetRJ WeGIA
- Code injection
- Unrestricted file upload
- CVSS 5.1 Medium
O2OA Personal Profile widget cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile dict cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile script cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
PHPGurukul Directory Management System add-directory.php cross site scripting
- PHPGurukul Directory Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile person cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
mtons mblog list cross site scripting
- mtons mblog
- Cross-site scripting (XSS)
- Code injection