Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the hotlinking process. An attacker can execute arbitrary JavaScript code in the context of users viewing the hotlinked SVG by uploading a crafted SVG file containing malicious scripts and creating a hotlink...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the hotlinking process. An attacker can execute arbitrary JavaScript code in the context of users viewing the hotlinked SVG by uploading a crafted SVG file containing malicious scripts and creating a hotlink...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the hotlinking process. An attacker can execute arbitrary JavaScript code in the context of users viewing the hotlinked SVG by uploading a crafted SVG file containing malicious scripts and creating a hotlink...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the hotlinking process. An attacker can execute arbitrary JavaScript code in the context of users viewing the hotlinked SVG by uploading a crafted SVG file containing malicious scripts and creating a hotlink...

PT-2026-23603

Name of the Vulnerable Software and Affected Versions Gokapi versions prior to 2.2.3 Description A malicious authenticated user can achieve stored cross-site scripting XSS by uploading SVG files and creating a hotlink for them. The hotlinking functionality does not properly handle scripts include...

Malicious code in anti-hotlinking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c97a43952ed880740537fc410c1ddd8b04eb4380cac2852980ae49901a9c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1023 Malicious code in anti-hotlinking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c97a43952ed880740537fc410c1ddd8b04eb4380cac2852980ae49901a9c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Music website of hotlinking combat it! - Vulnerability warning-the black bar safety net

Today quite tired. Since the website is not going to sleep. Pack night! Do what? Didn't the spirit. Listen to the song. Interesting, ha ha--DJ! The last Cola to recommend a site, feel good. Here, for materials of narrative convenience I'll assume that one site: http://www.china. com OK! Let's Go!...