John P

**Name of the Vulnerable Software and Affected Versions** Newses versions prior to 2.0.0.78 **Description** A missing authorization issue allows for the exploitation of incorrectly configured access control security levels. **Recommendations** Update to a version newer than 2.0.0.77.

**Name of the Vulnerable Software and Affected Versions** Travel Monster versions through 1.3.3 **Description** An issue exists in Travel Monster related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of these levels. **Recommendations** Update Travel Monster to a version later than 1.3.3.

**Name of the Vulnerable Software and Affected Versions** Orchid Store versions through 1.5.15 **Description** An issue exists in Orchid Store related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation due to this access control flaw. **Recommendations** Update Orchid Store to a version later than 1.5.15.

**Name of the Vulnerable Software and Affected Versions** Cream Magazine versions through 2.1.10 **Description** An issue exists in Cream Magazine that relates to incorrectly configured access control security levels, potentially allowing unauthorized access. **Recommendations** Update Cream Magazine to a version later than 2.1.10.