Emir Karataş

**Name of the Vulnerable Software and Affected Versions** Datactive versions 2.13.34 through 2.14.0.5 **Description** The software contains a flaw related to improper handling of user-supplied data during web page creation, specifically a Stored Cross-site Scripting (XSS) issue. This allows for the injection of malicious scripts into web pages viewed by other users. The issue involves insufficient neutralization of script-related HTML tags. **Recommendations** Update Datactive to version 2.14.0.6 or later.

**Name of the Vulnerable Software and Affected Versions** ArkSigner Software and Hardware Inc. AcBakImzala versions prior to 5.1.4 **Description** The AcBakImzala software contains a flaw related to improper input neutralization during web page generation, specifically a Reflected Cross-Site Scripting (XSS) condition. This allows for the execution of malicious scripts within the context of a user's browser. **Recommendations** Update AcBakImzala to version 5.1.4 or later.

**Name of the Vulnerable Software and Affected Versions** ArkSigner AcBakImzala versions prior to 5.1.4 **Description** The software contains a PHP Local File Inclusion issue due to improper control of filename inclusion mechanisms. This allows for the inclusion of files from untrusted sources. The issue affects the `AcBakImzala` software. **Recommendations** Update to version 5.1.4 or later.

**Name of the Vulnerable Software and Affected Versions** giSoft Information Technologies City Guide versions prior to 1.4.45 **Description** The software contains a flaw related to improper input handling during web page generation, which could lead to Reflected Cross-site Scripting (XSS). This allows an attacker to inject malicious scripts into web pages viewed by other users. **Recommendations** Update to version 1.4.45 or later.