Achmad Sonif

The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.

**Name of the Vulnerable Software and Affected Versions** LTL Freight Quotes versions prior to 4.2.19 **Description** An issue exists where values submitted through an unauthenticated endpoint are not properly sanitized or escaped before being stored and subsequently displayed on an administrative page. This leads to Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the server and executed in the session of any administrator who views the affected page. **Recommendations** Update LTL Freight Quotes to version 4.2.19 or later.

**Name of the Vulnerable Software and Affected Versions** LTL Freight Quotes versions 4.2.11 through 4.2.18 **Description** Unauthenticated users can perform a SQL injection because the plugin fails to sanitize and escape a parameter used in a SQL statement. The issue occurs via the `edit id` parameter within the Shipping Rule functionality. **Recommendations** Update LTL Freight Quotes to version 4.2.19 or later. Avoid using the `edit id` parameter in the Shipping Rule functionality until the update is applied.

**Name of the Vulnerable Software and Affected Versions** WPeMatico RSS Feed Fetcher versions prior to 2.8.26 **Description** The plugin fails to sanitize and escape a campaign configuration field when a specific feature is enabled. This allows users with the Contributor role or higher to perform Stored Cross-Site Scripting (XSS) attacks. These attacks execute within the session of any higher-privileged user who views the affected campaign. **Recommendations** Update WPeMatico RSS Feed Fetcher to version 2.8.26 or later.