Zekvan Arslan

**Name of the Vulnerable Software and Affected Versions** ilchCMS version 2.1.23 **Description** The issue allows for XSS via the `Link` parameter in the "index.php/partner/index" endpoint. **Recommendations** For ilchCMS version 2.1.23, avoid using the `Link` parameter in the "index.php/partner/index" endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Collabtive version 3.1 **Description** The issue allows for XSS via the `manageuser.php?action=profile` API endpoint, specifically through the `id` parameter. **Recommendations** For Collabtive version 3.1, avoid using the `id` parameter in the `manageuser.php?action=profile` API endpoint until the issue is resolved. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation.