Ali Osman Erbas

**Name of the Vulnerable Software and Affected Versions** GIFT4U versions prior to 1.0.11 **Description** The software contains an unauthenticated broken access control issue, which allows an attacker to access restricted resources or perform unauthorized actions without providing valid authentication credentials. **Recommendations** Update to a version newer than 1.0.10.

**Name of the Vulnerable Software and Affected Versions** GIFT4U versions prior to 1.0.11 **Description** Improper Neutralization of Special Elements used in an SQL Command in VillaTheme GIFT4U allows Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database true or false questions and determines the answer based on the application's response. **Recommendations** Update to version 1.0.11 or later.

**Name of the Vulnerable Software and Affected Versions** VeronaLabs WP SMS versions through 7.1 **Description** The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of malicious scripts within the context of a user's browser. The issue is present in the WP SMS component. **Recommendations** Update VeronaLabs WP SMS to a version later than 7.1.