Unexpected code found in a page when editing

[cnymike]

I was updating a page today and when I turned the WYSIWIG off, I saw this block of code in the editing window, below all the other content.

Code: Select all

xxxxxxxxxxxxxxxxxxxxxxxxxx

And here is the website page...http://www.stjameschurch.us/index.php?page=annual-report-2008

I changed the visibility attribute to visible and discovered that it was a hidden image of a text bubble. Any idea what this is or where it came from?

I'm using CMSSMS 1.6.6

[Sonya]

The image originates from http://www.kallout.com/. Did you install the plugin in Firefox?

[cnymike]

Sonya, I had read that elsewhere when I googled "kosa-target-image".

I do not have kallout installed as a Firefox plugin. Don't even know what kallout is.

But if it were due to a plugin in Firefox, then why am I seeing it in Safari browser and also in the source code? I'm not sure I understand what you are saying that it is caused by a Firefox plugin.

I do have other Firefox plugins but not sure if that relates to this.

It seems more likely to me that the editor itself is somehow injecting this code but I don't know that for sure.

Michael

[Dr.CSS]

Sounds like you got hacked...

[cnymike]

I don't think I was hacked. There are other people posting about this, as I discovered when Googling it.

If it was a hack, that's all that was done and there is no link involved nor anything else malicious that I can see. I've checked my site pretty well and see no other oddities. So I think hacked is not what happened. But I will continue to investigate and report what, if anything, I find.