Rubx

**Name of the Vulnerable Software and Affected Versions** Savsoft Quiz version 6.0 **Description** A issue was found in the Category Page component, specifically in the /public/index.php/Qbank/editCategory file. The manipulation of the `category name` argument with malicious input, such as ><script>alert('XSS')</script>, can lead to cross-site scripting. This issue can be exploited remotely. **Recommendations** For Savsoft Quiz version 6.0, as a temporary workaround, consider restricting access to the /public/index.php/Qbank/editCategory endpoint or validating and sanitizing the `category name` argument to prevent cross-site scripting attacks. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Cogites eReserv version 7.7.58 **Description** A cross-site scripting issue affects the processing of the file front/admin/config.php. The manipulation of the `id` argument with a specific input leads to cross-site scripting. This issue can be initiated remotely. **Recommendations** For version 7.7.58, consider restricting access to the front/admin/config.php file and avoid using the `id` argument in this context until a fix is available. As a temporary workaround, restrict the input to prevent cross-site scripting attacks.

**Name of the Vulnerable Software and Affected Versions** Cogites eReserv version 7.7.58 **Description** A cross-site scripting issue was found in some unknown functionality of the file /front/admin/tenancyDetail.php. The manipulation of the argument `Nom` with the input Dreux"><script>alert('XSS')</script> leads to cross-site scripting. The attack may be launched remotely. **Recommendations** For version 7.7.58, as a temporary workaround, consider restricting access to the /front/admin/tenancyDetail.php file until a patch is available. Avoid using the `Nom` argument in the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cogites eReserv version 7.7.58 **Description** A vulnerability was found in Cogites eReserv, affecting an unknown part of the file /front/admin/tenancyDetail.php. The manipulation of the `id` argument leads to cross-site scripting. It is possible to initiate the attack remotely. **Recommendations** For version 7.7.58, consider disabling access to the `/front/admin/tenancyDetail.php` file until a patch is available. As a temporary workaround, avoid using the `id` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.