David_12

A remote cross site scripting issue exists within the Public Password Reset Endpoint component. The flaw occurs in the `/forgotpasswd.html` endpoint when the `email` argument is manipulated. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

A flaw exists in the KindEditor Upload Interface component within the file '/Edit/php/upload json.php'. Remote manipulation of the `imgFile` argument allows for cross-site scripting, a technique where malicious scripts are injected into trusted websites.

An issue exists in the WebSocket Service component where improper processing of the `/index.html` endpoint allows remote attackers to bypass authentication.

A remote SQL injection is possible due to improper handling of the `ID` argument within an unknown function of the '/pages/pro del.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

A remote SQL injection is possible due to improper handling of the `delid` argument within the `/viewbilling.php` endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.