Trongnb02

**Name of the Vulnerable Software and Affected Versions** Hometory Mang Board WP versions 1.8.4 and earlier **Description** The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. **Recommendations** For versions 1.8.4 and earlier, update to a version later than 1.8.4 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Basix NEX-Forms – Ultimate Form Builder versions prior to 8.7.9 **Description** The issue is related to the improper neutralization of special elements used in an SQL command, also known as 'SQL Injection'. This allows for malicious SQL commands to be injected. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For versions prior to 8.7.9, upgrade to a version that contains a fix for this issue to secure your data against attacks. As a temporary workaround, consider restricting access to sensitive data and SQL commands to minimize the risk of exploitation. Avoid using user-input data directly in SQL commands until the issue is resolved.