Mesut Cetin

**Name of the Vulnerable Software and Affected Versions** Cookie Law Bar version 1.2.1 **Description** A stored cross-site scripting issue allows authenticated attackers to inject malicious scripts by submitting unsanitized input to the 'Bar Message' field. These script payloads are injected through the plugin settings page and execute in the browsers of all WordPress users viewing the site, which can lead to cookie theft and sensitive data exfiltration. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Palo Alto Networks Expedition (affected versions not specified) **Description** A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition allows attackers to execute malicious JavaScript code in the context of an authenticated user's browser. This can occur if the authenticated user clicks a malicious link, potentially leading to phishing attacks and Expedition browser-session theft. The vulnerability is related to the lack of protection of the web page structure, which can be exploited by a remote attacker to conduct an XSS attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Expedition (affected versions not specified) Description: A SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Solar-Log Base 15 Firmware version 6.0.1 Build 161 **Description** A stored cross-site scripting (XSS) vulnerability in the switch group function under the `/#ilang=DE&b=c smartenergy swgroups` endpoint in the web portal allows an attacker to escalate their privileges. This can be exploited to gain the rights of an installer or PM, which can then be used to gain administrative access to the web portal and execute further attacks. **Recommendations** For Solar-Log Base 15 Firmware version 6.0.1 Build 161, update to a version that includes the fix, as stated by the vendor that the vulnerability has been fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000. As a temporary workaround, consider restricting access to the switch group function under the `/#ilang=DE&b=c smartenergy swgroups` endpoint in the web portal until a patch is available.

**Name of the Vulnerable Software and Affected Versions** WP CSV WordPress plugin versions 1.8.0.0 and earlier **Description** The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly sanitize and escape a `parameter` before outputting it back in the page when importing a CSV. Additionally, the plugin lacks CSRF checks. This can lead to a Reflected Cross-Site Scripting attack. **Recommendations** For WP CSV WordPress plugin versions 1.8.0.0 and earlier, consider updating to a version that addresses the sanitization and escaping of parameters, as well as implements CSRF checks. As a temporary workaround, restrict access to the CSV import functionality to minimize the risk of exploitation. Avoid using the vulnerable parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: The WordPress Online Booking and Scheduling Plugin version 20.3.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting problem. It occurs because the Staff Full Name field is not properly escaped before being outputted on a page. This could potentially lead to a security issue. Recommendations: For versions 20.3.0 and earlier, update to version 20.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Staff Full Name field to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Giveaway WordPress plugin versions 1.2.2 and earlier **Description** The issue allows an administrative user to execute arbitrary SQL commands via the `$post id` on the "options.php" page. This is an SQL Injection issue. **Recommendations** For Giveaway WordPress plugin versions 1.2.2 and earlier, update to a version later than 1.2.2 to resolve the issue. As a temporary workaround, consider restricting access to the "options.php" page to minimize the risk of exploitation. Avoid using the `$post id` variable in the affected page until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Include Me WordPress plugin versions 1.2.1 and earlier **Description** The issue allows for path traversal and local file inclusion, potentially leading to Remote Code Execution (RCE) of the system due to log poisoning. This could result in a full compromise of the underlying structure. **Recommendations** For versions 1.2.1 and earlier, update to a version later than 1.2.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and logs to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Visitors WordPress plugin versions 0.3 and earlier **Description** The issue is related to an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. It occurs because the plugin displays the user's `user agent` string without proper validation or encoding within the WordPress admin panel. **Recommendations** For Visitors WordPress plugin versions 0.3 and earlier, update to a version later than 0.3 to resolve the issue. As a temporary workaround, consider restricting access to the WordPress admin panel to minimize the risk of exploitation.