Lucsob

**Name of the Vulnerable Software and Affected Versions** Super Progressive Web Apps versions prior to 2.2.44 **Description** Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. The `superpwa settings[offline message txt]` setting is stored without sanitization and passed to the frontend via `wp localize script()` without escaping. The value is then rendered using `innerHTML` in the JavaScript snackbar component. This allows authenticated attackers with Administrator-level access and above to inject arbitrary web scripts that execute when a user triggers the offline snackbar. **Recommendations** Update Super Progressive Web Apps to version 2.2.44 or later.

**Name of the Vulnerable Software and Affected Versions** Media Cleaner: Clean your WordPress! versions prior to 7.0.4 **Description** An issue exists where the `get urls from html()` function uses `DOMDocument::loadHTMLFile()` to fetch iframe source URLs. The process employs an insufficient hostname validation check based on a substring match against the site server name. This allows authenticated attackers with Administrator-level access or higher to perform Server-Side Request Forgery (SSRF), enabling them to initiate web requests to arbitrary locations from the application to query or interact with internal services. **Recommendations** Update to version 7.0.4 or later. As a temporary mitigation, restrict access to the `get urls from html()` function.

**Name of the Vulnerable Software and Affected Versions** Smart Custom Fields versions prior to 5.0.8 **Description** Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping of uploaded image attachment titles. Authenticated attackers with Author-level access and above can inject arbitrary web scripts into pages, which execute when a user accesses the affected page. **Recommendations** Update Smart Custom Fields to version 5.0.8 or later.

**Name of the Vulnerable Software and Affected Versions** The Menu Icons by ThemeIsle plugin for WordPress versions up to and including 0.13.20 **Description** The software is susceptible to a Stored Cross-Site Scripting issue due to inadequate input sanitization and output escaping. This allows authenticated attackers with Author-level access or higher to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page. The vulnerable parameter is ` wp attachment image alt` post meta. **Recommendations** Update The Menu Icons by ThemeIsle plugin to a version later than 0.13.20.