Malvin Valerian Gultom

**Name of the Vulnerable Software and Affected Versions** IP2Location Country Blocker versions prior to 2.38.3 **Description** The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting (XSS) attacks. This means that an attacker can inject malicious code into the web application, potentially leading to unauthorized access or data theft. The estimated number of potentially affected devices worldwide is not available. **Recommendations** For versions prior to 2.38.3, update to version 2.38.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the IP2Location Country Blocker to minimize the risk of exploitation. Avoid using the blocker until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: SoftLab Radio Player versions prior to 2.0.83 Description: The issue is related to a Server-Side Request Forgery (SSRF) vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions prior to 2.0.83, update to version 2.0.83 or later to resolve the issue.