MAL-2025-23866 Malicious code in joni-tempe96-breki (npm)

The package joni-tempe96-breki was found to contain malicious code...

MAL-2025-23861 Malicious code in joni-nasicampur34-breki (npm)

The package joni-nasicampur34-breki was found to contain malicious code...

OSV-2025-264 Security exception in org.joni.Parser.parseCharClass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254044 Crash type: Security exception Crash state: org.joni.Parser.parseCharClass org.joni.Lexer.fetchTokenInCC org.joni.Parser.parseCharClass...

CVE-2024-54208

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joni Halabi Block Controller block-controller allows Reflected XSS.This issue affects Block Controller: from n/a through = 1.4.3...

CVE-2024-54208

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joni Halabi Block Controller block-controller allows Reflected XSS.This issue affects Block Controller: from n/a through = 1.4.3...

CVE-2024-54208

CVE-2024-54208 is a Reflected XSS in the WordPress Block Controller plugin affecting versions up to 1.4.2. The vulnerability arises from improper input neutralization during web page generation. The CVSSv3.1 base score is 7.1 (HIGH) with NETWORK attack vector, requiring user interaction. Remediat...

CVE-2024-54208 WordPress Block Controller plugin <= 1.4.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joni Halabi Block Controller block-controller allows Reflected XSS.This issue affects Block Controller: from n/a through = 1.4.3...

CVE-2024-54208 WordPress Block Controller plugin <= 1.4.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joni Halabi Block Controller block-controller allows Reflected XSS.This issue affects Block Controller: from n/a through = 1.4.3...

PT-2024-36085 · Unknown · Joni Halabi Block Controller

Name of the Vulnerable Software and Affected Versions: Joni Halabi Block Controller versions 1.4.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...