Questions tagged [compromise-injection]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer

Script injection below body tag in Magento 2.4.1

I upgraded our Magento from 1.9 to 2.4.1 after we found malware that was trying copy customer credit cards before allowing the customer to use PayPal. I used Magento's migration tools to copy data to ...
2 votes
2 answers

Magento how to prevent core_config_data from getting malicious scripts

I have been scanning the website at Magento Scan and getting the following error: Magento Compromise Injection Your site is compromised with injected JavaScript. (131) The malicious code ...
0 votes
1 answer

Magento 1.7: PCI scan Can't Pass category URL with 'mode' param

Don't know why but the PCI scan do not pass Category URL of Magento and provide a SQL injection with 'mode' param in the below format. /main-category/sub-category/l/price:10-20/category-name.html?dir=...
1 vote
0 answers

Having issue with Magento 2 security scan. Magento Compromise Injection

I have checked with my all the sites with the bundle and merge js I am getting the same issue for all the sites i.e. Magento Compromise Injection. When I remove bundle and merge js then security scan ...