Ayato-Shitomi

**Name of the Vulnerable Software and Affected Versions** baserCMS versions prior to 5.1.2 **Description** The issue is a cross-site scripting vulnerability in the Blog posts feature of baserCMS, a website development framework. This vulnerability allows malicious code to be executed in the Blog posts feature. **Recommendations** For versions prior to 5.1.2, update to version 5.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Blog posts feature until the update is applied.

**Name of the Vulnerable Software and Affected Versions** baserCMS versions prior to 5.1.2 **Description** The issue is a cross-site scripting vulnerability in the Edit Email Form Settings Feature of baserCMS, a website development framework. This vulnerability allows malicious code to be executed in the Edit Email Form Settings feature. **Recommendations** For versions prior to 5.1.2, update to version 5.1.2 or later to fix the issue. As a temporary workaround, consider restricting access to the Edit Email Form Settings feature until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Teedy version 1.11 **Description** The issue is related to Cross Site Scripting (XSS) via the management console. This allows for potential account takeover. **Recommendations** For Teedy version 1.11, as a temporary workaround, consider restricting access to the management console until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.