Vnth4Nhnt

**Name of the Vulnerable Software and Affected Versions** Joomla CMS (affected versions not specified) **Description** Lack of output escaping in the multilingual associations component allows for a Cross-Site Scripting (XSS) vector. XSS is a flaw where an attacker injects malicious scripts into content delivered to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ERPNext versions prior to 16.9.1 **Description** Certain endpoints in this open source Enterprise Resource Planning tool fail to enforce proper authorization checks, which allows users to modify data beyond the permissions assigned to their role. **Recommendations** Update to version 16.9.1.

**Name of the Vulnerable Software and Affected Versions** ERPNext versions prior to 15.104.3 ERPNext versions prior to 16.14.0 **Description** Certain endpoints are susceptible to SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution, allowing an attacker to extract sensitive information via specially crafted requests. **Recommendations** Update to version 15.104.3. Update to version 16.14.0.

Name of the Vulnerable Software and Affected Versions versions not specified Description Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint. The vulnerability exists due to a flaw in how order clauses are constructed, potentially allowing an attacker to inject malicious SQL code. The affected API endpoint is '/articles'. The vulnerability could allow an attacker to manipulate database queries through the `order` parameter. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** versions prior to 2026-23899 **Description** An improper access check allows unauthorized access to webservice endpoints. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.