Kaixin1995

**Name of the Vulnerable Software and Affected Versions** InformationPush master version **Description** The issue allows a remote attacker to obtain sensitive information via the `title`, `time`, and `msg` parameters. This is a Cross Site Scripting vulnerability. **Recommendations** For InformationPush master version, consider restricting access to the vulnerable parameters `title`, `time`, and `msg` to minimize the risk of exploitation. As a temporary workaround, avoid using these parameters in sensitive operations until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.