Zhenhua Fan

**Name of the Vulnerable Software and Affected Versions** VikRentCar Car Rental Management System plugin for WordPress versions through 1.4.4 **Description** The VikRentCar Car Rental Management System plugin for WordPress is susceptible to time-based blind SQL Injection. This is due to inadequate escaping of user-supplied input and insufficient preparation of existing SQL queries, specifically through the `month` parameter. Authenticated attackers with Administrator-level access or higher can append SQL queries to existing ones, potentially extracting sensitive information from the database. **Recommendations** Update the VikRentCar Car Rental Management System plugin to a version later than 1.4.4.

**Name of the Vulnerable Software and Affected Versions** WP Booking Calendar plugin for WordPress versions up to, and including, 10.6 **Description** The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue affects multi-site installations and installations where unfiltered html has been disabled. Additionally, site administrators can grant lower-level users access to manage the plugin's settings, potentially extending the vulnerability to those users. **Recommendations** For versions up to, and including, 10.6, update to a version that includes the necessary input sanitization and output escaping fixes to prevent Stored Cross-Site Scripting attacks. As a temporary workaround, consider restricting access to the admin settings to minimize the risk of exploitation. Additionally, site administrators should review and limit the access granted to lower-level users for managing the plugin's settings.