Afifudin Maarif

**Name of the Vulnerable Software and Affected Versions** Welcart e-Commerce plugin for WordPress versions prior to 2.12.2 **Description** Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting (XSS), a technique where malicious scripts are permanently stored on the target server. The issue occurs via the `custom order` parameter in the guest checkout form. An attacker can inject arbitrary web scripts that execute when an administrator views the affected order within the WordPress admin panel. **Recommendations** Update the Welcart e-Commerce plugin for WordPress to version 2.12.2 or later. As a temporary mitigation, restrict access to the guest checkout form or avoid viewing orders containing the `custom order` parameter until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Salon Booking System – Free Version versions prior to 10.30.33 **Description** This issue is a Cross-Site Request Forgery (CSRF) that allows unauthenticated attackers to achieve remote code execution on the server. The flaw exists due to missing or incorrect nonce validation in the `setCustomText()` function. An attacker can trick a site administrator into clicking a link to trigger a forged request, injecting arbitrary PHP code into the `translate-constants.php` file. Although the `value` parameter is processed by `sanitize text field()`, this function fails to neutralize characters such as single quotes, parentheses, semicolons, $, and [], allowing the attacker to break out of the PHP string literal before the data is written to disk using `file put contents()`. **Recommendations** Update the plugin to a version later than 10.30.32.