Vulnerability Disclosure

CVE-2022-0271: Leaflet Maps Marker SQL Injection Exploit

Threat Landscape / August 8, 2022

BSG discovered CVE-2022-0271, a critical SQL injection in Leaflet Maps Marker WordPress plugin. Full vulnerability disclosure, PoC, and remediation steps.

CVE-2022-25854: Tagify npm Stored XSS Vulnerability

Threat Landscape / May 10, 2022

BSG researchers discovered a stored XSS vulnerability in @yaireo/tagify npm package. Full disclosure, PoC, and patch details inside.