Plugin invoked

Plugin on target file

XSS in template literals

XSS in script block

SQL injection in SELECT

SQL injection in UPDATE

Code locations reported

Contextual impact assessment

Website URL XSS vector

Both routes covered

Plugin invoked

Plugin on target file

SQL injection in search_products

SQL injection in get_order_history

Non-parameterized query detail

Command injection in export_report

Command injection in delete_product

Code locations reported

Contextual risk assessment

SQL injection in delete_product

Plugin invoked

Web form surface covered

API surface covered

Webhook surface covered

XSS in tickets.js

SQL injection findings

Command injection in API

XSS in webhook handler

Code locations reported

Contextual severity assessment

Methodology soundness

Plugin invoked

SQL injection in payment creation

SQL injection in refund route

SQL injection in history query

SQL injection in merchant search

Command injection in refund logger

Dependency check performed

Dependency findings noted

Code locations reported

Financial contextual severity

Both layers covered

Plugin invoked

SQL injection in register

SQL injection in login

SQL injection in admin search

SQL injection in password change

Command injection in audit logger

All five routes covered

Regular scanning recommendation

Actionable integration steps

Code locations reported

Contextual severity

Plugin invoked

Insufficient validation framing

Register SQL injection

Reset-password SQL injection

Comments XSS via content

Comments XSS via author

Search SQL injection

All four endpoints analyzed

Bypass mechanism in register

Bypass mechanism in comments

Plugin invoked

External sources framed as untrusted

SQL injection in handleDeliveryEvent

SQL injection in handleLocationUpdate

Command injection in handleLocationUpdate

SQL injection in syncPartnerStatus

XSS in generateStatusPage

addslashes inadequacy noted

Code locations specified

Contextual impact assessment

Both files scanned

Plugin invoked

XSS in UserProfile bio

XSS in UserProfile badges

URL XSS in UserProfile website

XSS in PostRenderer body

XSS in PostRenderer editReason

XSS in PostRenderer dmPreview

XSS in MessageThread messages

Component-level locations

All three files scanned

Contextual impact assessment

dangerouslySetInnerHTML identified as risk pattern

Plugin invoked for code

Dependency scanning mentioned

SQL injection in search_appointments

SQL injection in submit_intake

Command injection in submit_intake

SQL injection in send_message

SQL injection in view_profile

XSS in view_profile

Jinja2 safe filter risk

Vulnerable dependency identified

Healthcare contextual impact

Integrated remediation output

Plugin invoked

SQL injection in user search

SQL injection in report query

Command injection in file processor

XSS in HTML report endpoint

Go-specific SQL safe pattern noted

text/template vs html/template distinction

All three surfaces covered

Code locations reported

Contextual severity assessment

External data sources treated as untrusted

Plugin invoked

Static analysis tool mentioned

SQL injection in LoginServlet

SQL injection in SearchServlet

XSS in SearchServlet output

XSS in ProfileServlet output

Command injection in ReportServlet

JDBC PreparedStatement noted as fix

Code locations reported

Contextual severity assessment

Combined output produced

Plugin invoked

html_safe XSS in comments

html_safe XSS in user bio

SQL injection in search

SQL injection in user lookup

Command injection in file processing

html_safe vs sanitize distinction

ActiveRecord string interpolation explained

Code locations reported

Contextual impact assessment

All input surfaces covered