Yoshinori Matsumoto

**Name of the Vulnerable Software and Affected Versions** ClipBucket versions prior to 2.8.1 RC2 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. **Recommendations** For versions prior to 2.8.1 RC2, update to version 2.8.1 RC2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MailPoet Newsletters (wysija-newsletters) plugin versions prior to 2.6.11 **Description** A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users. **Recommendations** For versions prior to 2.6.11, update to version 2.6.11 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Webmin versions prior to 1.690 **Description** A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML. **Recommendations** For versions prior to 1.690, update to version 1.690 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Welcart plugin versions prior to 1.2.2 **Description** The issue is related to a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. **Recommendations** For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Welcart plugin versions prior to 1.2.2 **Description** A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase. **Recommendations** For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** @WEB ShoppingCart versions prior to 1.5.2.0 @WEB ShoppingCart T versions 1.5.0.1 and earlier **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. **Recommendations** For @WEB ShoppingCart versions prior to 1.5.2.0, update to version 1.5.2.0 or later. For @WEB ShoppingCart T versions 1.5.0.1 and earlier, update to a version later than 1.5.0.1.