MAL-2022-5188 Malicious code in page-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c160990eea879201a1e564d8dbf6e0fa9871f0eaaa38b2f4d45e379e45820a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in page-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c160990eea879201a1e564d8dbf6e0fa9871f0eaaa38b2f4d45e379e45820a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Insert Pages < 3.7.0 - Contributor+ Stored Cross-Site Scripting

The plugin adds a shortcode that prints out other pages' content and custom fields. It can be used by users with a role as low as Contributor to perform Cross-Site Scripting attacks by storing the payload/s in another post's custom fields. - Create a page A - Add a custom field containing JS in...