[FIXED]interesting spam breach or (?)

I recently fond strange spam comments on modx.ru. The spam messages have A DIFFERENT template and are displayed ABOVE all moderation and regular comments output. Jot version 1.0.

How can this be done and how do I close this breach? Is it an SQL injection?

Could be some HTML doing that; certain table elements out-of-order will display at the top of everything else.

Well, Susan, I suppose there must be a container comment, that holds the html for bringin those spam comments above. But no, there are not. Moreover a cant figure out at all how can I delete those spam comments. I guess they are in the Database. Gonna check out

FIXED. That was a breach of my whole site (as it displays older UserComments along with Jot). Spammer somehow found hidden UC form and posted spam through it.

Thanks for ur attention anyways.