Daichi Takaki

**Name of the Vulnerable Software and Affected Versions** Events Manager plugin versions prior to 5.9 for WordPress **Description** The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting. **Recommendations** For versions prior to 5.9, update to version 5.9 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier **Description** A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. **Recommendations** For MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier, update to a version later than 1.28.0 to resolve the issue.