Dexter-Morgan

**Name of the Vulnerable Software and Affected Versions** mwasikz robo-cafe-rms versions up to 228c44a02823f04e85db32b7137809a2856148fc **Description** An issue in the `manage-food.php` file allows for unrestricted upload, which can be exploited remotely. This occurs through an unknown function within the specified file. **Recommendations** Restrict access to the `manage-food.php` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** mwasikz robo-cafe-rms versions up to 228c44a02823f04e85db32b7137809a2856148fc **Description** A cross site scripting issue exists within the Edit Profile Feature in the file `frontend/update-account.php`. Remote exploitation is possible by manipulating the `Name`, `Address`, or `City` arguments. Cross site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** coolbeans1212 MateisHomePage-Website versions up to ea2a4226deeca27ab1fb9df0552ec76444547811 **Description** A remote cross site scripting issue exists in the `users.php` file. This occurs when the `Search` argument is manipulated, allowing an attacker to execute malicious scripts in the victim's browser. **Recommendations** Apply patch 6406308df9771d2fd477b56dafe4878dd846df6e. As a temporary mitigation, restrict access to the `users.php` file or avoid using the `Search` argument until the patch is applied.