Evan Nr

**Name of the Vulnerable Software and Affected Versions** Really Simple SSL versions prior to 9.6.0 **Description** Broken Access Control allows users with the Subscriber role to perform unauthorized actions. **Recommendations** Update to a version newer than 9.5.9.

Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0.

**Name of the Vulnerable Software and Affected Versions** Five Star Restaurant Reservations versions prior to 2.7.15 **Description** Missing authorization in Etoile Web Design Incorporated Five Star Restaurant Reservations allows for the exploitation of incorrectly configured access control security levels. **Recommendations** Update to a version newer than 2.7.14.

**Name of the Vulnerable Software and Affected Versions** e4jvikwp VikBooking Hotel Booking Engine & PMS versions prior to 1.8.9 **Description** Improper neutralization of input during web page generation allows DOM-Based Cross-Site Scripting (XSS), a flaw where the application contains client-side scripts that execute malicious code in the user's browser due to unsafe handling of data. **Recommendations** Update to a version later than 1.8.8.

Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.