Your site is compromised with injected JavaScript. (112)

[jrivett32]

Imagine my alarm when seeing this message in the results of a site scan this morning. However, my panic subsided a bit when I searched the forum and saw that false positives seem to be an ongoing issue.

I just upgraded the site to Magento 1.9.3.10, and all the patches show as being installed, except for those few that always seem to show as 'unknown' (and which I have separately confirmed are installed).

Unfortunately, no additional details are provided in the scan results, so I don't even know where to look for a possible infection.

Should I just run the scan again, or wait until you've had a chance to look into the problem?

[Manish Mittal]

Hello @jrivett32

I faced the same issue and it was fixed once I installed all required Patches so the system should update all patches. If you already upgraded or installed patches. Try again with scan again. 

[jrivett32]

As I said, all patches are installed. As you suggested, I reran the scan. I received email indicating that no new issues were detected, but the report itself is blank. I think I'm going to go ahead and ignore this security scanner in the future.

[Manish Mittal]

@jrivett32

Yes you can ignore for now and Feel free to contact Magento Security Team regarding the security scan tool over support team or directly at security@magento.com