Hivesec

**Name of the Vulnerable Software and Affected Versions** POS Entegratör versions prior to 3.7.104 **Description** An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions and access restricted areas or functions without proper authentication. **Recommendations** Update to a version newer than 3.7.103.

**Name of the Vulnerable Software and Affected Versions** Quick Interest Slider versions prior to 3.1.7 **Description** An unauthenticated Cross Site Scripting (XSS) issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. **Recommendations** Update Quick Interest Slider to a version newer than 3.1.6.

**Name of the Vulnerable Software and Affected Versions** Gutenverse Form versions prior to 2.4.8 **Description** An unauthenticated Cross Site Scripting (XSS) issue exists, which allows an attacker to inject malicious scripts into web pages viewed by other users. **Recommendations** Update Gutenverse Form to version 2.4.8 or later.

**Name of the Vulnerable Software and Affected Versions** Nexi XPay versions prior to 8.3.1 **Description** A missing authorization issue in Nexi Payments Nexi XPay allows for the exploitation of incorrectly configured access control security levels. **Recommendations** Update to a version newer than 8.3.1.

**Name of the Vulnerable Software and Affected Versions** WPDeveloper BetterDocs versions prior to 4.3.11 **Description** An issue in the betterdocs component allows the retrieval of embedded sensitive system information to an unauthorized control sphere. **Recommendations** Update to a version later than 4.3.10.