Revanth Meesala

The Kirki WordPress plugin before 6.3.0 does not check that a user is allowed to act on a collaboration comment before changing its state, allowing users whom an administrator has granted content-level access to the page builder to modify comments left by other users, including on pages they cannot themselves open.

**Name of the Vulnerable Software and Affected Versions** Form Maker by 10Web versions prior to 1.15.45 **Description** This issue occurs when the software fails to properly parameterize a user-controlled value used in a dynamic SQL query for a database-backed choice field. This allows users with subscriber-level privileges to perform a second-order SQL injection, which is a type of attack where malicious input is stored by the application and later executed as a command when the stored data is retrieved and used in a different query. The vulnerable variable is `display name`. **Recommendations** Update Form Maker by 10Web to version 1.15.45 or later.

**Name of the Vulnerable Software and Affected Versions** Phoca Commander versions 1.0.0 through 6.1.1 **Description** Improper limitation of paths for save and download actions leads to path traversal, a condition where an attacker can access files and directories outside the intended folder. **Recommendations** Update Phoca Commander to a version later than 6.1.1.