0Xmanticore

**Name of the Vulnerable Software and Affected Versions** Business Directory versions prior to 6.4.23 **Description** An unauthenticated Cross Site Scripting (XSS) issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. **Recommendations** Update to a version newer than 6.4.22.

**Name of the Vulnerable Software and Affected Versions** Cisco Webex Meetings (affected versions not specified) **Description** Insufficient validation of user input in the web-based user interface allows an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack. An attacker could exploit this by persuading a user to follow a malicious link, leading to the execution of arbitrary script code in the user's browser or unauthorized access to sensitive browser-based information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.