Van Lyubov

**Name of the Vulnerable Software and Affected Versions** KiviCare versions 3.6.2 and earlier **Description** The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in KiviCare. This vulnerability allows for unauthorized access. **Recommendations** For versions 3.6.2 and earlier, update to a version later than 3.6.2 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EventON versions through 2.2.14 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables an attacker to inject malicious scripts into the website, potentially affecting users. **Recommendations** For versions through 2.2.14, update to a version later than 2.2.14 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

**Name of the Vulnerable Software and Affected Versions** Metagauss ProfileGrid versions through 5.7.2 **Description** The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid. **Recommendations** For versions through 5.7.2, update to a version later than 5.7.2 to resolve the issue. At the moment, there is no information about other mitigation measures for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup versions through 4.0.23 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. **Recommendations** For versions through 4.0.23, update to a version later than 4.0.23 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.