Stypr

The issue affects Pi-hole's Web interface, which is based on AdminLTE, allowing for cross-site scripting when adding a client via the groups-clients management page. This issue was patched in version 5.8.

The issue affects the SOY Inquiry component of SOY CMS, allowing remote attackers to force administrators to edit files by loading a specially crafted webpage. This can happen when an administrator is logged in.

The issue allows remote attackers to force the administrator to edit files once the administrator loads a specially crafted webpage, leading to Remote Code Execution (RCE) due to Reflected Cross-Site Scripting (XSS).

The issue affects baserCMS, allowing for Cross Site Scripting (XSS) and Remote Code Execution (RCE) due to arbitrary file upload. This can be executed by logging in as a system administrator and uploading an executable script file, such as a PHP file. The affected components are ThemeFilesController.php and UploaderFilesController.php.