EUVD-2021-11490

Malware in sbrugna...

Malicious code in wix-events-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c8042b735fab012588f30c2f58b93feeda458483e6bbf0bfffb5694a59a258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7166 Malicious code in wix-events-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c8042b735fab012588f30c2f58b93feeda458483e6bbf0bfffb5694a59a258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-24578

The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its matchday parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24578: Improper Neutralization of Input During Web Page Generation

The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its matchday parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue...