Mano257200

**Name of the Vulnerable Software and Affected Versions** Perplexity AI GPT-4 version 2.51.0 **Description** An issue allows a remote attacker to obtain sensitive information via the `token` component in the shared chat URL. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Perplexity AI GPT-4 (affected versions not specified) **Description** An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Webkul QloApps version 1.6.1 Description: The issue exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL. Recommendations: For Webkul QloApps version 1.6.1, consider modifying the application to prevent appending authentication tokens to URLs during redirection, or implement an alternative secure method for handling user authentication. As a temporary workaround, restrict access to the admin panel and other protected areas to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Webkul QloApps version 1.6.1 **Description** A problematic vulnerability was found in Webkul QloApps, affecting an unknown part of the file /stores of the component Your Location Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The issue is planned to be addressed by removing the affected page in the long term. **Recommendations** For Webkul QloApps version 1.6.1, consider restricting access to the /stores component of Your Location Search until a fix is available. As a temporary workaround, disabling the affected part of the Your Location Search component may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.