Sharanabasappa

**Name of the Vulnerable Software and Affected Versions** MagePeople Team Bus Ticket Booking with Seat Reservation versions n/a through 5.4.3 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) problem, which allows Cross Site Request Forgery. This affects the bus ticket booking system with seat reservation functionality. **Recommendations** For versions n/a through 5.4.3, update to a version later than 5.4.3 to resolve the issue. As a temporary workaround, consider implementing additional validation for requests to prevent Cross Site Request Forgery.

**Name of the Vulnerable Software and Affected Versions** WP-Spreadplugin versions prior to 4.8.9 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS) or Stored XSS. This problem occurs because of inadequate input validation, allowing malicious scripts to be stored and executed. **Recommendations** For versions prior to 4.8.9, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the plugin's functionality until a patch is available.

**Name of the Vulnerable Software and Affected Versions** WP Travel versions through 9.3.1 **Description** The issue involves Improper Neutralization of Input During Web Page Generation, which is also known as Cross-site Scripting (XSS). This problem allows for Stored XSS in WP Travel. **Recommendations** For versions through 9.3.1, update to a version later than 9.3.1 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Salon Booking System versions through 10.9 **Description** The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects the Salon Booking System, allowing for potential unauthorized access. **Recommendations** For versions through 10.9, update to a version that contains a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PageLayer versions 1.8.7 and earlier **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks. **Recommendations** For versions 1.8.7 and earlier, update to a version later than 1.8.7 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MagePeople Team Bus Ticket Booking with Seat Reservation versions through 5.3.5 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks. **Recommendations** For versions through 5.3.5, update to a version later than 5.3.5 to resolve the issue. As a temporary workaround, consider restricting user input to prevent malicious scripts from being injected into the web page generation process.

**Name of the Vulnerable Software and Affected Versions** Taxi Booking Manager for WooCommerce versions through 1.0.9 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS, where an attacker can inject malicious scripts into the website, potentially affecting users. **Recommendations** For versions through 1.0.9, update to a version later than 1.0.9 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable functions or parameters until the issue is resolved. At the moment, there is no information about additional mitigation measures.

**Name of the Vulnerable Software and Affected Versions** Nick Halsey Floating Social Media Links versions 1.5.2 and earlier **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS. **Recommendations** For Nick Halsey Floating Social Media Links versions 1.5.2 and earlier, update to a version later than 1.5.2 to resolve the issue. At the moment, there is no information about additional mitigation measures.

**Name of the Vulnerable Software and Affected Versions** Link To Bible versions n/a through 2.5.9 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks. **Recommendations** For versions n/a through 2.5.9, update to a version later than 2.5.9 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Perials Simple Social Share versions n/a through 3.0 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks. **Recommendations** For versions n/a through 3.0, update to a version that fixes the Stored XSS issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable features in Simple Social Share until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** SeedProd WordPress Notification Bar versions 1.3.10 and earlier **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS in the SeedProd WordPress Notification Bar. **Recommendations** For SeedProd WordPress Notification Bar versions 1.3.10 and earlier, update to a version later than 1.3.10 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WPCS (WordPress Custom Search) versions 1.1 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting (XSS) vulnerability, specifically Stored XSS. **Recommendations** For WPCS (WordPress Custom Search) versions 1.1 and earlier, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Toidicode.Com (thanhtaivtt) Viet Nam Affiliate versions through 1.0.0 **Description** The issue affects the Viet Nam Affiliate, allowing for Stored XSS due to improper neutralization of input during web page generation. **Recommendations** For versions through 1.0.0, update to a version that properly neutralizes input during web page generation to prevent Stored XSS attacks.

**Name of the Vulnerable Software and Affected Versions** QuickieBar versions 1.8.4 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of malicious scripts in the application, potentially affecting users who access the compromised page. **Recommendations** For versions 1.8.4 and earlier, update to a version that contains a fix for this issue, as using outdated versions may expose users to Stored XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iePlexus Featured Content Gallery versions 3.2.0 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting (XSS) vulnerability, specifically Stored XSS. **Recommendations** For versions 3.2.0 and earlier, update to a version later than 3.2.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Viet Affiliate Link versions 1.2 and earlier **Description** The issue affects Viet Affiliate Link, allowing for Stored XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting vulnerability. **Recommendations** For versions 1.2 and earlier, update to a version that fixes the Stored XSS issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Comments Evolved for WordPress versions 1.6.3 and earlier **Description** The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. **Recommendations** For versions 1.6.3 and earlier, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Configure Login Timeout versions from n/a through 1.0 **Description** The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. **Recommendations** For versions from n/a through 1.0, update to a version that fixes the Stored XSS issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GOMO gee Search Plus versions 1.4.4 and earlier **Description** The issue affects GOMO gee Search Plus, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting attacks. **Recommendations** For versions 1.4.4 and earlier, update to a version later than 1.4.4 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Search Keyword Redirect versions n/a through 1.0 **Description** The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. **Recommendations** For versions n/a through 1.0, update to a version that fixes the Stored XSS issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.