Vulnerability Disclosure

CVE-2022-1123: Leaflet Maps Marker SQL Injection

Threat Landscape / August 8, 2022

BSG discovered CVE-2022-1123, a SQL injection in the Leaflet Maps Marker WordPress plugin. Vulnerability details, disclosure references, and mitigation steps.

CVE-2022-25854: Tagify npm Stored XSS Vulnerability

Threat Landscape / May 10, 2022

BSG researchers discovered a stored XSS vulnerability in @yaireo/tagify npm package. Full disclosure, PoC, and patch details inside.