Malicious code in lilac-willow-jef539-project (npm)

The package lilac-willow-jef539-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jewel-hxjd6-wrdqf-willow-project (npm)

The package jewel-hxjd6-wrdqf-willow-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hedgehog-willow-klf228-project (npm)

The package hedgehog-willow-klf228-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in everglow-willow-msx578-project (npm)

The package everglow-willow-msx578-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dragon-willow-wls785-project (npm)

The package dragon-willow-wls785-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dandelion-willow-riv429-project (npm)

The package dandelion-willow-riv429-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in aroma-willow-cpn475-project (npm)

The package aroma-willow-cpn475-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious Package

Overview aroma-willow-cpn475-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2025-12330

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

CVE-2025-12331

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

EUVD-2025-36375

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

EUVD-2025-36376

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

CVE-2025-12330

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

CVE-2025-12331

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

CVE-2025-12331 Willow CMS add unrestricted upload

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

CVE-2025-12331

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

CVE-2025-12331

Willow CMS prior to 1.4.0 is affected by an unrestricted upload weakness in the /admin/images/add function, enabling remote exploitation. Multiple sources confirm the issue and public exploit availability. Impacted is an unknown internal function; exploitation could allow attacker-controlled file...

CVE-2025-12331 Willow CMS add unrestricted upload

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

CVE-2025-12331 Willow CMS add unrestricted upload

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

CVE-2025-12330 Willow CMS Add Post add cross site scripting

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...