Pham Van Tam

**Name of the Vulnerable Software and Affected Versions** Simple Notification plugin for WordPress versions prior to 1.4 **Description** The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For versions prior to 1.4, update to version 1.4 or later to resolve the issue. As a temporary workaround, consider restricting administrator-level access to trusted users only, and enable the unfiltered html capability for administrators to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Booking Calendar and Notification plugin for WordPress versions prior to 4.0.4 **Description** The issue allows unauthorized access, modification, and loss of data due to missing capability checks on the `wpcb all bookings()`, `wpcb update booking post()`, and `wpcb delete posts()` functions. This enables unauthenticated attackers to extract data, create or update bookings, or delete arbitrary posts. **Recommendations** For versions prior to 4.0.4, update to version 4.0.4 or later to resolve the issue. As a temporary workaround, consider disabling the `wpcb all bookings()`, `wpcb update booking post()`, and `wpcb delete posts()` functions until a patch is available. Restrict access to these functions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Modal Portfolio plugin for WordPress versions up to, and including, 1.7.4.2 **Description** The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with Administrator-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For versions up to, and including, 1.7.4.2, update to a version that includes the necessary input sanitization and output escaping fixes to prevent Stored Cross-Site Scripting attacks.

**Name of the Vulnerable Software and Affected Versions** Indeed Ultimate Learning Pro plugin for WordPress versions up to, and including, 3.9 **Description** The issue allows for time-based SQL Injection via the `post id` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This enables authenticated attackers with Administrator-level access and above to append additional SQL queries into already existing queries, potentially extracting sensitive information from the database. **Recommendations** For Indeed Ultimate Learning Pro plugin for WordPress versions up to, and including, 3.9, update to a version that addresses the SQL Injection issue, as the current version allows for the exploitation of sensitive database information through the `post id` parameter. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Legoeso PDF Manager plugin for WordPress versions up to, and including, 1.2.2 **Description** The issue allows authenticated attackers with Author-level access and above to perform time-based SQL Injection via the `checkedVals` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This enables attackers to append additional SQL queries into already existing queries, potentially extracting sensitive information from the database. **Recommendations** For versions up to, and including, 1.2.2, consider disabling the `checkedVals` parameter until a patch is available to prevent potential SQL Injection attacks. Restrict access to the plugin's functionality to minimize the risk of exploitation, especially for users with Author-level access and above.

**Name of the Vulnerable Software and Affected Versions** Cookie Notice Bar plugin for WordPress version 1.3.0 and earlier **Description** The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For version 1.3.0 and earlier, update to a version later than 1.3.0 to resolve the issue. As a temporary workaround, consider restricting administrator-level access to trusted users only until a patch is available. Additionally, enabling unfiltered html, if possible, may mitigate the risk, but this should be done with caution and careful consideration of the potential security implications.

**Name of the Vulnerable Software and Affected Versions** Reaction Buttons plugin for WordPress versions up to, and including, 2.1.6 **Description** The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For Reaction Buttons plugin for WordPress versions up to, and including, 2.1.6, update to a version later than 2.1.6 to resolve the issue. As a temporary workaround, consider restricting access to admin settings to minimize the risk of exploitation. Additionally, ensure that unfiltered html is enabled to reduce the vulnerability's impact.

**Name of the Vulnerable Software and Affected Versions** Simple Add Pages or Posts plugin for WordPress versions up to, and including, 2.0.0 **Description** The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For Simple Add Pages or Posts plugin for WordPress versions up to, and including, 2.0.0, consider disabling the plugin until a patch is available to prevent exploitation. Restrict access to the plugin's functionality to minimize the risk of arbitrary web script injection. Additionally, ensure proper input sanitization and output escaping are in place to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Songkick Concerts and Festivals versions 0.9.7 and earlier **Description** The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user into performing an unintended action, such as clicking on a malicious link. **Recommendations** For versions 0.9.7 and earlier, consider implementing CSRF tokens or other anti-CSRF measures to prevent exploitation. As a temporary workaround, restrict access to sensitive functionality until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Easy WP Tiles versions n/a through 1 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page. **Recommendations** For versions n/a through 1, update to a version that fixes the Stored XSS issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Metagauss Event Kikfyre versions through 2.1.8 **Description** The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. **Recommendations** For versions through 2.1.8, update to a version later than 2.1.8 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** FM Notification Bar versions 1.0.2 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially leading to unauthorized access or control. **Recommendations** For FM Notification Bar versions 1.0.2 and earlier, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** bPlugins Alert Box Block – Display notice/alerts in the front end versions 1.1.0 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting (XSS). This means an attacker can inject malicious scripts into the website, potentially affecting users who visit the compromised page. **Recommendations** For versions 1.1.0 and earlier, update to a version that fixes the improper neutralization of input during web page generation to prevent stored XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xfinity Soft Content Cloner versions n/a through 1.0.1 **Description** The issue is related to a Missing Authorization vulnerability in Xfinity Soft Content Cloner, which allows exploiting incorrectly configured access control security levels. **Recommendations** For versions n/a through 1.0.1, update to a version that addresses the Missing Authorization vulnerability to prevent exploitation of incorrectly configured access control security levels. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Orbisius Simple Notice versions 1.1.3 and earlier **Description** The issue affects the Orbisius Simple Notice plugin, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting attacks. **Recommendations** For Orbisius Simple Notice versions 1.1.3 and earlier, update to a version that contains a fix for this issue, as the current version is affected by the Stored XSS vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Leetoo Toocheke Companion versions prior to 1.166 **Description** The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised pages. **Recommendations** For versions prior to 1.166, update to a version that fixes the improper neutralization of input during web page generation to prevent stored XSS attacks. As a temporary workaround, consider restricting user input to minimize the risk of exploitation until a patch is available.

**Name of the Vulnerable Software and Affected Versions** AnyRoad versions 1.3.2 and earlier **Description** The issue is related to a Cross-Site Request Forgery (CSRF) problem, which affects AnyRoad. This allows for Cross Site Request Forgery. **Recommendations** For versions 1.3.2 and earlier, update to a version later than 1.3.2 to resolve the issue. As a temporary workaround, consider implementing anti-CSRF measures, such as token-based validation, to prevent unauthorized requests.

**Name of the Vulnerable Software and Affected Versions** Bonjour Bar versions n/a through 1.0.0 **Description** The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting (XSS). This means that an attacker can inject malicious scripts into the website, which are then stored and executed by the website, potentially affecting other users. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** For versions n/a through 1.0.0, update to a version newer than 1.0.0 to resolve the issue. As a temporary workaround, consider restricting user input to prevent malicious scripts from being injected into the website. Avoid using potentially vulnerable API endpoints until the issue is resolved. At the moment, there is no other information about additional mitigation measures.

**Name of the Vulnerable Software and Affected Versions** Scott Reilly Post-to-Post Links versions n/a through 4.2 **Description** The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page. **Recommendations** For versions n/a through 4.2, update to a version that fixes the improper neutralization of input during web page generation to prevent Stored XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Data443 Posts Footer Manager versions n/a through 2.1.0 **Description** The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially leading to unauthorized access or control. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** For versions n/a through 2.1.0, update to a version that includes a fix for this issue, as no specific workaround or mitigation measures are provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.