Vulnerability-Lab

WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject malicious script code through the figure parameter in wp:html blocks. Attackers can inject iframe elements with event handlers like onload that execute when administrators or privileged users preview or view the affected page content, enabling session hijacking and persistent phishing attacks.

**Name of the Vulnerable Software and Affected Versions** Rocket LMS version 1.1 **Description** A persistent cross-site scripting issue exists in the support ticket module. Authenticated users can inject malicious script code via the `title` parameter. This allows attackers to submit support tickets containing embedded HTML or JavaScript payloads that execute in the browsers of other users viewing the message history, potentially leading to phishing attacks and session hijacking (the unauthorized acquisition of a user's session token to impersonate them). **Recommendations** As a temporary workaround, restrict access to the support ticket module or avoid using the `title` parameter until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VestaCP version 0.9.8-26 **Description** The software contains a session token issue within the LoginAs module. This allows remote attackers to manipulate authentication tokens due to insufficient validation. Exploitation can lead to unauthorized access to user accounts and login requests without administrative privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Froxlor Server Management Panel version 0.10.16 **Description** A persistent cross-site scripting issue exists in the customer registration input fields. This allows attackers to inject malicious scripts using the `username`, `name`, and `firstname` parameters, which are then executed when administrators view customer traffic modules. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Isshue Shopping Cart version 3.5 **Description** The software contains a persistent cross-site scripting issue in title input fields within the stock, customer, and invoice modules. An attacker with elevated privileges can inject malicious scripts that execute upon preview, potentially leading to session hijacking and persistent phishing attacks. The vulnerability affects the `title` input fields. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider sanitizing all user-supplied input for the `title` fields in the stock, customer, and invoice modules. Restrict access to the affected modules to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Ametys CMS version 4.4.1 **Description** Ametys CMS version 4.4.1 has a persistent cross-site scripting issue in the link directory’s input fields for external links. An attacker can inject malicious script code into the link text and descriptions, leading to persistent attacks that can compromise user sessions and manipulate application modules. The issue allows for the execution of malicious scripts when users access the affected links. **Recommendations** Update Ametys CMS to a version that addresses this issue. As a temporary workaround, sanitize all input data for external links in the link directory to prevent the injection of malicious scripts.

**Name of the Vulnerable Software and Affected Versions** RDP Manager version 4.9.9.3 **Description** RDP Manager is susceptible to a denial of service condition. Local attackers can exploit this by providing oversized input in the 'Verbindungsname' and 'Server' fields, leading to application crashes and potentially requiring reinstallation. **Recommendations** Update to a newer version that contains a fix for this vulnerability.