Justakazh

Name of the Vulnerable Software and Affected Versions: Gavias Halpes versions prior to 1.2.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. Recommendations: For versions prior to 1.2.5, update to version 1.2.5 or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable API endpoints until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: Tijaji versions 1.43 and earlier Description: The issue affects Tijaji, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting vulnerability. Recommendations: For versions 1.43 and earlier, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: asmedia versions n/a through 1.3.1 moseter versions n/a through 1.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For asmedia versions n/a through 1.3.1, update to a version that properly neutralizes input during web page generation to prevent Cross-site Scripting. For moseter versions n/a through 1.3.1, update to a version that properly neutralizes input during web page generation to prevent Cross-site Scripting.

Name of the Vulnerable Software and Affected Versions: Ghostwriter versions n/a through 1.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. Recommendations: For Ghostwriter versions n/a through 1.4, update to a version that includes a fix for this issue, as no specific mitigation measures are provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Asmedia Tuaug4 versions 1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. Recommendations: For Asmedia Tuaug4 versions 1.4 and earlier, update to a version that includes a fix for this issue, as no specific workaround is provided.

Name of the Vulnerable Software and Affected Versions: twh offset writing versions n/a through 1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This occurs in the twh offset writing component. Recommendations: For versions n/a through 1.2, consider disabling the offset writing feature until a patch is available to prevent Reflected XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: CarZine versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations: For CarZine versions 1.4.6 and earlier, update to a version that contains a fix for this issue, as no specific mitigation measures are provided.

Name of the Vulnerable Software and Affected Versions: mythemes my white versions n/a through 2.0.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. Recommendations: For versions n/a through 2.0.8, update to a version later than 2.0.8 to resolve the issue. As a temporary workaround, consider restricting user input to prevent malicious script injection until a patch is available.

Name of the Vulnerable Software and Affected Versions: polka dots versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. Recommendations: For versions 1.2 and earlier, update to a version that fixes the Improper Neutralization of Input During Web Page Generation issue to prevent Reflected XSS attacks. As a temporary workaround, consider validating and sanitizing all user input to prevent malicious script injection until a patch is available.

Name of the Vulnerable Software and Affected Versions: Tiki Time versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. Recommendations: For versions 1.3 and earlier, update to a version that fixes this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: jinwen Js O3 Lite versions 1.5.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. Recommendations: For versions 1.5.8.2 and earlier, update to a version that includes a fix for this issue, as no specific mitigation measures are provided.

Name of the Vulnerable Software and Affected Versions: duwasai Flashy versions 1.2.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. Recommendations: For duwasai Flashy versions 1.2.1 and earlier, update to a version that fixes the Improper Neutralization of Input During Web Page Generation issue to prevent Reflected XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tantyyellow versions 1.0.0.0 through 1.0.0.5 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. **Recommendations** For versions 1.0.0.0 through 1.0.0.5, update to a version that fixes the Improper Neutralization of Input During Web Page Generation issue to prevent Reflected XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rara Theme UltraLight versions 1.2 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting (XSS). This means an attacker can inject malicious scripts into a website, potentially stealing user data or taking control of the user's session. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For Rara Theme UltraLight versions 1.2 and earlier, update to a version that fixes the improper neutralization of input during web page generation issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: tydskrif versions prior to 1.1.3 Description: The issue is related to improper neutralization of input during web page generation, allowing Reflected XSS attacks. This problem affects tydskrif, enabling attackers to perform Cross-site Scripting. Recommendations: For versions prior to 1.1.3, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** CactusThemes Gameplan versions 1.5.10 and earlier **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Reflected XSS. **Recommendations** For versions 1.5.10 and earlier, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ReConstruction versions 1.4.7 and earlier **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Reflected XSS. **Recommendations** For versions 1.4.7 and earlier, update to a version later than 1.4.7 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tutor LMS versions 2.7.3 and earlier **Description** The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. **Recommendations** For Tutor LMS versions 2.7.3 and earlier, update to a version later than 2.7.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Easy Digital Downloads versions 3.2.12 and earlier **Description** The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. **Recommendations** For versions 3.2.12 and earlier, update to a version later than 3.2.12 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Jinwen js versions n/a through 2.5.7 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Reflected XSS attacks. **Recommendations** For versions n/a through 2.5.7, update to a version later than 2.5.7 to resolve the issue.