Byteoverride

**Name of the Vulnerable Software and Affected Versions** ReviewX versions prior to 2.3.11 **Description** Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute when a user accesses the affected page. **Recommendations** Update to a version newer than 2.3.10.

**Name of the Vulnerable Software and Affected Versions** SureCart versions prior to 4.2.3 **Description** Cross Site Scripting (XSS) exists, allowing users with subscriber privileges to execute malicious scripts in the browser of other users. **Recommendations** Update to a version newer than 4.2.2.