Jyoti Raval

**Name of the Vulnerable Software and Affected Versions** CMS Made Simple versions prior to 2.2.15 **Description** The issue allows for XSS via the `m1 mod` parameter in a ModuleManager local uninstall action to "admin/moduleinterface.php". **Recommendations** For versions prior to 2.2.15, update to version 2.2.15 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Elgg versions prior to 1.12.18 Elgg versions 2.3.x prior to 2.3.11 **Description** The issue allows for an open redirect. **Recommendations** For Elgg versions prior to 1.12.18, update to version 1.12.18 or later. For Elgg versions 2.3.x prior to 2.3.11, update to version 2.3.11 or later.