Mika

**Name of the Vulnerable Software and Affected Versions** Omar Mohamed Mohamoud LIVE TV versions through 1.2 **Description** The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting issue. This allows for the execution of malicious scripts through manipulated web requests. The affected component is susceptible to exploitation via crafted input. **Recommendations** Versions prior to 1.3 are affected.

**Name of the Vulnerable Software and Affected Versions** Sleekplan versions through 0.2.0 **Description** A Reflected Cross-site Scripting (XSS) issue exists in Sleekplan due to improper neutralization of input during web page generation. This allows an attacker to inject malicious scripts into web pages viewed by other users. The `input` provided is not properly sanitized, leading to the execution of arbitrary code within the context of the user's browser. The vulnerable component is related to web page generation. **Recommendations** Update Sleekplan to a version later than 0.2.0.

**Name of the Vulnerable Software and Affected Versions** Jakub Glos Off Page SEO versions through 3.0.3 **Description** The software contains a flaw related to improper handling of user-supplied data during web page creation, leading to a potential Reflected Cross-Site Scripting (XSS) condition. This allows an attacker to inject malicious scripts into web pages viewed by other users. The vulnerability exists due to insufficient input validation or sanitization. The affected component is susceptible to exploitation through crafted input. **Recommendations** Update Jakub Glos Off Page SEO to a version later than 3.0.3.

**Name of the Vulnerable Software and Affected Versions** Tormorten WP Microdata versions through 1.0 **Description** The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored XSS attacks. **Recommendations** Update Tormorten WP Microdata to a version later than 1.0.

**Name of the Vulnerable Software and Affected Versions** WP Fast Cache versions through 1.5 **Description** The software contains a Cross-Site Request Forgery (CSRF) flaw. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge. **Recommendations** Update WP Fast Cache to a version later than 1.5.

**Name of the Vulnerable Software and Affected Versions** Evergreen Content Poster versions through 1.4.5 **Description** The software contains a Cross-Site Request Forgery (CSRF) flaw. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge. **Recommendations** Update Evergreen Content Poster to a version later than 1.4.5.

**Name of the Vulnerable Software and Affected Versions** MultiVendorX versions through 4.2.23 **Description** A missing authorization issue exists in MultiVendorX dc-woocommerce-multi-vendor. The issue allows access to functionality that is not properly constrained by Access Control Lists (ACLs). **Recommendations** Update MultiVendorX to a version later than 4.2.23.

**Name of the Vulnerable Software and Affected Versions** LeadBI Plugin for WordPress versions through 1.7 **Description** The LeadBI Plugin for WordPress contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be injected into web pages viewed by other users. The vulnerability allows an attacker to inject malicious code that will be executed in the context of a user’s browser. **Recommendations** Update the LeadBI Plugin for WordPress to a version newer than 1.7.

**Name of the Vulnerable Software and Affected Versions** yonisink Custom Post Type Images versions through 0.5 **Description** A Cross-Site Request Forgery (CSRF) issue exists in yonisink Custom Post Type Images that can lead to Code Injection. The issue allows for potential code execution through crafted requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: andy moyle Church Admin versions n/a through 5.0.9 Description: A missing authorization flaw exists in andy moyle Church Admin. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tikolan FW Anker versions through 1.2.6 **Description** The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update Tikolan FW Anker to a version later than 1.2.6.

**Name of the Vulnerable Software and Affected Versions** Shiful H SS Font Awesome Icon versions through 4.1.3 **Description** The software contains a cross-site scripting (XSS) issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation. **Recommendations** Update Shiful H SS Font Awesome Icon to a version later than 4.1.3.

**Name of the Vulnerable Software and Affected Versions** Parallax Scrolling Enllax.js versions through 0.0.6 **Description** The software contains a cross-site scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. **Recommendations** Update Parallax Scrolling Enllax.js to a version later than 0.0.6.

**Name of the Vulnerable Software and Affected Versions** Parallax Scrolling Enllax.js versions through 0.0.6 **Description** A Cross-Site Request Forgery (CSRF) issue exists in Parallax Scrolling Enllax.js, potentially allowing attackers to perform actions on behalf of authenticated users. **Recommendations** Update Parallax Scrolling Enllax.js to a version beyond 0.0.6.

**Name of the Vulnerable Software and Affected Versions** Luis Rock Master Paper Collapse Toggle versions through 1.1 **Description** The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update to a version later than 1.1.

**Name of the Vulnerable Software and Affected Versions** Aparat Video Shortcode versions through 0.2.4 **Description** The Ali Aghdam Aparat Video Shortcode software contains a Stored Cross-site Scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into web pages. **Recommendations** Update Aparat Video Shortcode to a version later than 0.2.4.

**Name of the Vulnerable Software and Affected Versions** w1zzard Simple Text Slider versions through 1.0.5 **Description** The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update w1zzard Simple Text Slider to a version later than 1.0.5.

**Name of the Vulnerable Software and Affected Versions** iamroody 金数据 versions n/a through 1.0 **Description** The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update iamroody 金数据 to a version later than 1.0.

**Name of the Vulnerable Software and Affected Versions** Easy Download Media Counter versions through 1.2 **Description** The software contains a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks. **Recommendations** Update Easy Download Media Counter to a version later than 1.2.

**Name of the Vulnerable Software and Affected Versions** premiumbizthemes Simple Price Calculator versions through 1.3 **Description** A flaw exists in premiumbizthemes Simple Price Calculator that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.