Hatim Chabik

**Name of the Vulnerable Software and Affected Versions** SPIP versions 4.1.3 and earlier SPIP versions 4.2.x through 4.2.6 **Description** The issue arises from the `ecrire/public/assembler.php` file in SPIP, where input from ` request()` is not restricted to safe characters, such as alphanumerics, allowing for XSS attacks. **Recommendations** For SPIP versions 4.1.3 and earlier, update to version 4.1.13 or later. For SPIP versions 4.2.x through 4.2.6, update to version 4.2.7 or later.

**Name of the Vulnerable Software and Affected Versions** Cisco Webex Meetings (affected versions not specified) **Description** The issue exists due to insufficient validation of user-supplied input by the web-based interface of Cisco Webex Meetings. An attacker could exploit this by persuading a user to click a maliciously crafted link, potentially allowing the execution of arbitrary script code in the context of the affected interface or access to sensitive, browser-based information. This could enable the attacker to disclose protected information, modify the appearance of the web page, or conduct phishing and drive-by download attacks. **Recommendations** For all affected versions of Cisco Webex Meetings, update to the latest software version released by Cisco, as it addresses this vulnerability. At the moment, there is no information about additional mitigation measures or workarounds that address this vulnerability.