Gregxsunday

**Name of the Vulnerable Software and Affected Versions** User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress versions 1.0.13 and earlier **Description** The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in the feedback submission page, which will execute when a user clicks the link while pressing the command key. The `page submitted` `link` value is specifically vulnerable to this type of attack. **Recommendations** For versions 1.0.13 and earlier, update to a version later than 1.0.13 to resolve the issue. As a temporary workaround, consider disabling the feedback submission page until a patch is available. Restrict access to the `page submitted` link value to minimize the risk of exploitation. Avoid using the `link` value in the feedback submission page until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Mastodon versions 2.5.0 through 3.5.7 Mastodon versions 3.5.8 is not affected, but versions prior to 3.5.8 are affected, however 4.0.3 and prior to 4.0.4 and 4.1.1 and prior to 4.1.2 are also affected. Mastodon versions 2.5.0 through 4.1.1 **Description** The issue arises from an insecure LDAP query during the login process, allowing an attacker to perform an LDAP injection attack. This can lead to the leakage of arbitrary attributes from the LDAP database. **Recommendations** For Mastodon versions 2.5.0 through 3.5.7, update to version 3.5.8 or later. For Mastodon versions 4.0.0 through 4.0.3, update to version 4.0.4 or later. For Mastodon versions 4.1.0 through 4.1.1, update to version 4.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 2.8.13 Discourse version 3.0.0.beta16 and earlier in the beta and tests-passed channels **Description** The issue allows a maliciously crafted URL to be included in a post to carry out cross-site scripting attacks on sites with disabled or overly permissive Content Security Policy (CSP). Discourse's default CSP prevents this issue. **Recommendations** For versions prior to 2.8.13, update to version 2.8.13 or later. For version 3.0.0.beta16 and earlier in the beta and tests-passed channels, update to version 3.0.0.beta16 or later. As a temporary workaround, enable and/or restore your site's CSP to the default one provided with Discourse.

**Name of the Vulnerable Software and Affected Versions** Discourse version 2.9.0.beta14 **Description** The issue in Discourse, an open-source discussion platform, involves maliciously embedded URLs that can leak an admin's digest of recent topics, potentially exposing private information. A patch is available to address this issue. **Recommendations** For version 2.9.0.beta14, update to version 2.9.0.beta15 to resolve the issue. At the moment, there is no information about other workarounds for this issue.

**Name of the Vulnerable Software and Affected Versions** Casdoor versions prior to 1.126.1 **Description** The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the `uploadFile` function. **Recommendations** For versions prior to 1.126.1, update to version 1.126.1 or later to resolve the issue. As a temporary workaround, consider disabling the `uploadFile` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to the latest stable, beta, and test-passed versions **Description** A malicious admin could exploit this issue to perform port enumeration on the local host or other hosts on the internal network, as well as against hosts on the Internet. **Recommendations** For all versions prior to the latest stable, beta, and test-passed versions, update to the latest version to resolve the issue. As a temporary workaround, self-hosters can use the `DISCOURSE BLOCKED IP BLOCKS` env var to stop webhooks from accessing private IPs.