Malicious code in paypal-googlepay-advanced-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d35f787a39f0e1878861d55d01419521e64324607fca8a9c99cca5b490ed59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

qTranslate X <= 3.4.6.8 - Multiple Admin+ Stored Cross-Site Scripting

The plugin does not escape some of its settings before outputting them in attributes, allowing high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. Affected POST Parameters: - Settings Languages Languages:...