MAL-2023-8438 Malicious code in jotform-webhook-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79c05d67fd61e4cb82e93b3c98181d7cc58e89c7dab47e8aab381f60211ef6db The OpenSSF Package Analysis project identified 'jotform-webhook-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in uploadcare-jotform-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2d37a0408ad8c603efcb131e322f0f2d2a142058620fa1b41f396e212590b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-919 Malicious code in uploadcare-jotform-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2d37a0408ad8c603efcb131e322f0f2d2a142058620fa1b41f396e212590b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

jotform.com XSS vulnerability

Open Bug Bounty ID: OBB-559843 Description| Value ---|--- Affected Website:| jotform.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based o...

jotform.com XSS vulnerability

Vulnerable URL: https://www.jotform.com/upload.php?qid=3"=source-existing=themes=uploadImageIframe Details: Description| Value ---|--- Patched:| Yes, at 26.05.2017 Latest check for patch:| 26.05.2017 07:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5698 VIP...

jotform.com XSS vulnerability

Vulnerable URL: http://www.jotform.com/answers/188518-Expired-certificate-on-https-submit-jotformpro-com-as-of-2013-02-28?message=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%3Cimg/onerror=%27;alert%28/XSSPOSED/%29;%27src=1%3E Details: Description| Value ---|--- Patched:| Yes, at 15.02.2017...