Grzegorz Niedziela

**Name of the Vulnerable Software and Affected Versions** User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress versions 1.0.13 and earlier **Description** The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in the feedback submission page, which will execute when a user clicks the link while pressing the command key. The `page submitted` `link` value is specifically vulnerable to this type of attack. **Recommendations** For versions 1.0.13 and earlier, update to a version later than 1.0.13 to resolve the issue. As a temporary workaround, consider disabling the feedback submission page until a patch is available. Restrict access to the `page submitted` link value to minimize the risk of exploitation. Avoid using the `link` value in the feedback submission page until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** MonsterInsights WordPress plugin versions prior to 8.9.1 **Description** The issue allows an unauthenticated attacker to inject arbitrary web scripts into page titles by spoofing requests to Google Analytics, due to the lack of sanitization or escaping of page titles in the top posts/pages section. **Recommendations** For versions prior to 8.9.1, update to version 8.9.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the top posts/pages section until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Smokescreen versions prior to 0.0.3 **Description** Smokescreen is a simple HTTP proxy designed to prevent server-side request forgery (SSRF) attacks by blocking access to certain URLs. It also features a deny list to restrict access to additional URLs. However, an issue was discovered that allowed attackers to bypass the deny list by appending a dot to the end of user-supplied URLs or by providing input in a different letter case. This could potentially allow external attackers to leverage the behavior of applications to connect to or scan internal infrastructure. **Recommendations** Upgrade Smokescreen to version 0.0.3 or later. As a temporary workaround, consider restricting access to the deny list feature until the issue is resolved. Additionally, be cautious when handling user-supplied URLs to minimize the risk of exploitation.