Lourcode

**Nome do software vulnerável e versões afetadas** OpenVPN Connect, versões 3.0 a 3.4.6 **Descrição** A vulnerabilidade está relacionada à falha na neutralização de instruções em código executado dinamicamente. A exploração dessa vulnerabilidade pode permitir que um invasor execute código arbitrário utilizando a variável de ambiente `DYLD INSERT LIBRARIES`. Isso pode permitir que usuários locais executem código em bibliotecas externas de terceiros. **Recomendações** Para as versões 3.0 a 3.4.6 do OpenVPN Connect, atualize para uma versão que contenha uma correção para este problema a fim de evitar a exploração. Como solução alternativa temporária, considere restringir o uso da variável de ambiente `DYLD INSERT LIBRARIES` até que um patch esteja disponível.

**Name of the Vulnerable Software and Affected Versions** CodeBard's Patron Button and Widgets for Patreon plugin versions <= 2.1.8 **Description** The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions on behalf of the user. **Recommendations** For versions <= 2.1.8, update to a version higher than 2.1.8 to resolve the issue. As a temporary workaround, consider restricting access to the plugin until a patch is available. Avoid using the plugin in sensitive environments until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Katie Seaborn Zotpress plugin versions <= 7.3.3 **Description** The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For Katie Seaborn Zotpress plugin versions <= 7.3.3, update to a version higher than 7.3.3 to resolve the issue. At the moment, there is no information about additional mitigation measures.

**Name of the Vulnerable Software and Affected Versions** FooGallery plugin versions <= 2.2.35 **Description** The issue exists due to insufficient protection of the web page structure in the foogallery image editor modal function of the FooGallery plugin for WordPress. This allows a remote attacker to conduct cross-site scripting attacks. The estimated number of potentially affected devices is not specified. **Recommendations** For FooGallery plugin versions <= 2.2.35, update to a version higher than 2.2.35 to resolve the issue. As a temporary workaround, consider restricting access to the foogallery image editor modal function to minimize the risk of exploitation.