Andrea Mattiazzo

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue is related to a stored XSS attack that occurs due to missing sanitation of inputs. This allows arbitrary users to conduct the attack, which triggers when other users view a certain project. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** StackIdeas EasyDiscuss versions 5.0.5 through 5.0.9 **Description** A SQL injection issue allows a remote attacker to obtain sensitive information via a crafted request to the `search` parameter in the Users module. **Recommendations** For versions 5.0.5 through 5.0.9, update to version 5.0.10 to resolve the issue. As a temporary workaround, consider restricting access to the Users module or disabling the search functionality until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** PRIMEUR SPAZIO version 2.5.1.954 **Description** The issue allows an unauthenticated attacker to obtain sensitive data related to the content of transferred files via a crafted HTTP request. **Recommendations** For version 2.5.1.954, consider restricting access to the HTTP Server in the File Transfer component until a patch is available. As a temporary workaround, avoid using the File Transfer feature to minimize the risk of exploitation.