61 matches found
MAL-2025-13765 Malicious code in @zalastax/nolb-react-sj (npm)
The package @zalastax/nolb-react-sj was found to contain malicious code...
Malicious code in sj-tw-test-security (npm)
The package sj-tw-test-security was found to contain malicious code...
Malicious code in sj-tw-sec (npm)
The package sj-tw-sec was found to contain malicious code...
Malicious code in sj-labc (npm)
The package sj-labc was found to contain malicious code...
MAL-2025-33340 Malicious code in sj-tw-abc (npm)
The package sj-tw-abc was found to contain malicious code...
Malicious code in @zalastax/nolb-react-sj (npm)
The package @zalastax/nolb-react-sj was found to contain malicious code...
Malicious code in sj-tw-abc (npm)
The package sj-tw-abc was found to contain malicious code...
MAL-2025-33339 Malicious code in sj-labc (npm)
The package sj-labc was found to contain malicious code...
MAL-2025-33342 Malicious code in sj-tw-test-security (npm)
The package sj-tw-test-security was found to contain malicious code...
MAL-2025-33341 Malicious code in sj-tw-sec (npm)
The package sj-tw-sec was found to contain malicious code...
MAL-2025-12684 Malicious code in @zalastax/nolb-node-sj (npm)
The package @zalastax/nolb-node-sj was found to contain malicious code...
CVE-2020-21653
Myucms v2.2.1 contains a server-side request forgery SSRF in the component \controller\index.php, which can be exploited via the sj method...
CVE-2024-31085
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rob Marsh, SJ Post-Plugin Library allows Reflected XSS.This issue affects Post-Plugin Library: from n/a through 2.6.2.1...
CVE-2024-31085
CVE-2024-31085 is a Reflected XSS in the WordPress plugin Post-Plugin Library (aka Rob Marsh, SJ Post-Plugin Library). The vulnerability stems from improper neutralization of user input during web page generation, enabling an attacker-controlled payload to be reflected in responses. Affected vers...
CVE-2024-31085: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rob Marsh, SJ Post-Plugin Library allows Reflected XSS.This issue affects Post-Plugin Library: from n/a through 2.6.2.1...
sj-cg.de Improper Access Control vulnerability OBB-3770774
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sj-cats.com Cross Site Scripting vulnerability OBB-3366276
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sj-computershop.com Cross Site Scripting vulnerability OBB-3231228
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
website.sjfood.us Cross Site Scripting vulnerability OBB-3116933
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sj-computershop.com Cross Site Scripting vulnerability OBB-2761369
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...