Malicious Package

Overview federalist-admin is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

GSA Bounty: Double Stored Cross-Site scripting in the admin panel

Description Hello. I discovered a Stored XSS attack vector in the Custom Domain field POC & Reproduction steps 1. Login to the federalist and go to the some instance http://localhost:1337/sites//settings 2. Fill the Custom Domain field by the javascript:alertdocument.domain and Demo domain...