Sergio Medeiros

**Name of the Vulnerable Software and Affected Versions** iNiLabs School Express (SMS Express) version 6.2 **Description** iNiLabs School Express (SMS Express) 6.2 is susceptible to a Stored Cross-Site Scripting (XSS) issue within its content-management features, accessible to authenticated administrator users. The issue is present in parameters submitted via POST requests to the `/posts/edit/{id}` endpoint, and similar editors for Notices and Pages. Insufficient input sanitization and output encoding allow attackers to inject HTML/JS payloads. These payloads are saved and subsequently rendered without proper sanitization, leading to JavaScript execution in other users' browsers when they access the affected content. An authenticated attacker can execute arbitrary JavaScript in the context of another user, potentially leading to session hijacking, privilege escalation, data exfiltration, or administrative account takeover. The application lacks a restrictive Content Security Policy (CSP) or adequate filtering mechanisms to prevent these attacks. **Recommendations** Update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SummerNote version 0.8.18 **Description** The issue is related to Cross Site Scripting (XSS) via the Code View Function. This means an attacker could potentially inject malicious scripts into the code view of SummerNote, affecting users who interact with the compromised content. **Recommendations** For SummerNote version 0.8.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QDOCS Smart School version 7.0.0 **Description** The issue is related to Cross Site Scripting (XSS), which results in arbitrary code execution in admin functions, specifically when adding or updating records. This could potentially allow an attacker to execute malicious code on the system. **Recommendations** For QDOCS Smart School version 7.0.0, consider disabling admin functions related to adding or updating records until a patch is available. Restrict access to these functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rocketsoft Rocket LMS version 1.9 **Description** A cross-site scripting (XSS) issue allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications, potentially compromising user sessions. **Recommendations** For Rocketsoft Rocket LMS version 1.9, patch immediately and validate user input to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to the admin web interface for creating new courses and course notifications until a patch is available.

**Name of the Vulnerable Software and Affected Versions** PDFMyURL (affected versions not specified) **Description** The issue allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the `url` parameter. This is related to a Server-Side Request Forgery (SSRF) issue in the PDFMyURL service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.