Jubilian Ho Hong Yi

**Name of the Vulnerable Software and Affected Versions** IBM Watson Studio versions 4.0 through 5.2.0 on Cloud Pak for Data **Description** An authenticated user can embed arbitrary JavaScript code in the Web UI, potentially altering intended functionality and leading to credentials disclosure within a trusted session. **Recommendations** Update to a version later than 5.2.0.

**Name of the Vulnerable Software and Affected Versions** flusity CMS versions through 2.45 **Description** The issue allows for XSS in the Gallery Name through the tools/addons model.php file. The product has ceased its development as of February 2024. **Recommendations** For versions through 2.45, as a temporary workaround, consider restricting access to the tools/addons model.php file until a resolution is determined, however, since the product has ceased development, there is no information about a newer version that contains a fix for this issue.