Pizza-Power

**Name of the Vulnerable Software and Affected Versions** YesWiki versions prior to 4.5.4 **Description** A stored cross-site scripting (XSS) issue was found in the comments feature of YesWiki, a wiki system written in PHP. This issue allows a malicious actor to inject JavaScript payloads that are stored and later executed in the browser of any user viewing the affected comment. The XSS occurs because the application fails to properly sanitize or encode user input submitted to the comments. Notably, the application sanitizes or does not allow execution of `<script>` tags, but does not account for payloads obfuscated using JavaScript block comments like `/* JavaScriptPayload */`. **Recommendations** For versions prior to 4.5.4, update to version 4.5.4 to resolve the issue. As a temporary workaround, consider disabling the comments feature until a patch is available. Restrict access to the comments module to minimize the risk of exploitation. Avoid using the comments feature in the affected API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** YesWiki versions prior to 4.5.4 **Description** YesWiki, a wiki system written in PHP, is susceptible to remote code execution. This issue arises from an arbitrary file write capability, which can be exploited to create a file with a PHP extension. An attacker can then browse to this file, executing arbitrary code on the server and potentially leading to a full server compromise. This exploitation could occur unintentionally through user actions. **Recommendations** For versions prior to 4.5.4, update to version 4.5.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** YesWiki versions prior to 4.5.4 **Description** The issue allows a malicious user to create and download site backups without authentication. This could result in a malicious attacker making numerous requests to create archives and fill up the file system, or by downloading the archive which contains sensitive site information. The request to commence a site backup can be performed and downloaded without authentication due to a predictable filename used for the archives. **Recommendations** For versions prior to 4.5.4, update to version 4.5.4 to resolve the issue. As a temporary workaround, consider restricting access to the site backup functionality until the update is applied.

**Name of the Vulnerable Software and Affected Versions** pymedusa versions prior to 1.0.12 **Description** pymedusa is an automatic video library manager for TV Shows. An attacker with access to the web interface can update the git executable path in /config/general/ > advanced settings with arbitrary OS commands. This allows an attacker to execute arbitrary OS commands as the user running the pymedusa program. **Recommendations** For versions prior to 1.0.12, users are advised to upgrade to version 1.0.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.