Nathu Nandwani

**Name of the Vulnerable Software and Affected Versions** WonderCMS version 3.4.3 **Description** The issue is related to an arbitrary file upload vulnerability in the `uploadFileAction()` function. This allows attackers to execute arbitrary code via a crafted SVG file. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For WonderCMS version 3.4.3, consider disabling the `uploadFileAction()` function until a patch is available to prevent the execution of arbitrary code via crafted files. Restrict access to file upload functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WonderCMS version 3.4.3 **Description** A Server-Side Request Forgery (SSRF) issue in the Plugins Page allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the `pluginThemeUrl` parameter. **Recommendations** For WonderCMS version 3.4.3, as a temporary workaround, consider restricting access to the Plugins Page or validating the `pluginThemeUrl` parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZTE MF65 versions prior to V1.0.0B05 ZTE MF65M1 versions prior to V1.0.0B02 **Description** The issue is related to cross-site scripting due to improper neutralization of input during web page generation. This could allow an attacker to conduct reflected XSS or HTML injection attacks on the devices. **Recommendations** For ZTE MF65 versions prior to V1.0.0B05, update to version V1.0.0B05 or later to resolve the issue. For ZTE MF65M1 versions prior to V1.0.0B02, update to version V1.0.0B02 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Creatiwity wityCMS version 0.6.1 **Description** A stored cross-site scripting (XSS) issue exists in the 'Website's name' field of the 'Settings' page under the 'General' menu. This allows remote attackers to inject arbitrary web script or HTML via a crafted website name by sending an authenticated POST HTTP request to the "admin/settings/general" endpoint. **Recommendations** For Creatiwity wityCMS version 0.6.1, as a temporary workaround, consider validating and sanitizing user input for the `website name` variable to prevent XSS attacks. Restrict access to the 'Settings' page under the 'General' menu to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ClipperCMS version 1.3.3 **Description** A stored cross-site scripting (XSS) issue exists due to improper validation of user input in the "Site Name" field, located in the "site" tab under configurations. This allows remote attackers to inject arbitrary web script or HTML via a crafted site name to the "manager/processors/save settings.processor.php" file. **Recommendations** For ClipperCMS version 1.3.3, as a temporary workaround, consider validating and sanitizing all user input for the "Site Name" field to prevent XSS attacks. Restrict access to the "manager/processors/save settings.processor.php" file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.