H18192Ho

A cross-site scripting (XSS) issue allows attackers to execute arbitrary code via the home page description on the basic information page. This can be exploited by manipulating the `home page description` variable. The issue is related to the basic information page, specifically the `home page description` field, which is vulnerable to XSS attacks.

A Cross-Site Request Forgery (CSRF) issue was discovered in the Top Up Balance component under the Edit Member module. This allows for malicious requests to be made without the user's knowledge or consent.

A Cross-Site Request Forgery (CSRF) issue was discovered in the Basic Information component under the Edit Member module. This allows for unauthorized actions to be performed on behalf of a user.

A Cross-Site Request Forgery (CSRF) issue was discovered in the Edit Admin Profile module, allowing attackers to arbitrarily change Administrator account information.

A cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `Public Security Record Number` text field.