Sudoninja-Noob

**Name of the Vulnerable Software and Affected Versions** NeDi version 1.9C **Description** The issue allows an attacker to execute arbitrary JavaScript code via the "Topology-Linked.php" `dv` parameter, enabling a cross-site scripting (XSS) attack. **Recommendations** For NeDi version 1.9C, as a temporary workaround, consider restricting access to the "Topology-Linked.php" endpoint until a patch is available. Avoid using the `dv` parameter in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NeDi version 1.9C **Description** The issue allows an attacker to execute arbitrary JavaScript code via the "Reports-Devices.php" page `st[]` parameter, enabling a cross-site scripting (XSS) attack. **Recommendations** For NeDi version 1.9C, as a temporary workaround, consider restricting access to the "Reports-Devices.php" page or avoiding the use of the `st[]` parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.