Tim Kranz

**Name of the Vulnerable Software and Affected Versions** ChronoForms version 7.0.7 **Description** The issue allows for Directory Traversal, enabling the reading of arbitrary files via the `fname` parameter. This can potentially lead to unauthorized access to sensitive information. **Recommendations** For ChronoForms version 7.0.7, consider restricting access to the `fname` parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ChronoForums version 2.0.11 **Description** The issue allows for Directory Traversal, enabling the reading of arbitrary files. **Recommendations** For ChronoForums version 2.0.11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NeoPost Mail Accounting Software Pro version 5.0.6 **Description** The issue allows for XSS in the php/Commun/FUS SCM BlockStart.php endpoint, specifically through the `code` parameter. **Recommendations** For NeoPost Mail Accounting Software Pro version 5.0.6, avoid using the `code` parameter in the php/Commun/FUS SCM BlockStart.php endpoint until the issue is resolved.