Tony Wu

**Name of the Vulnerable Software and Affected Versions** ServiceNow versions Quebec prior to Patch 10 Hot Fix 8b ServiceNow versions Rome prior to Patch 10 Hot Fix 1 ServiceNow versions San Diego prior to Patch 7 ServiceNow versions Tokyo prior to Tokyo Patch 1 ServiceNow versions Utah prior to Utah General Availability **Description** The issue is an Access Control List (ACL) bypass in ServiceNow Core functionality. If successfully exploited, it could allow an authenticated user to obtain sensitive information from tables missing authorization controls. **Recommendations** For ServiceNow Quebec, apply Patch 10 Hot Fix 8b or later to resolve the issue. For ServiceNow Rome, apply Patch 10 Hot Fix 1 or later to resolve the issue. For ServiceNow San Diego, apply Patch 7 or later to resolve the issue. For ServiceNow Tokyo, apply Tokyo Patch 1 or later to resolve the issue. For ServiceNow Utah, upgrade to Utah General Availability or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Popup Builder WordPress plugin versions prior to 4.0.7 **Description** The issue is related to the lack of protection against SQL query structure exploitation when handling `orderby` and `order` parameters in the admin-post.php script of the Popup Builder plugin for WordPress. This could allow a remote attacker to execute arbitrary SQL code. The vulnerability can be exploited by high privilege users to perform SQL injection, potentially leading to unauthorized data access or modification. **Recommendations** For versions prior to 4.0.7, update to version 4.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin dashboard and limiting the privileges of users who can access the Popup Builder plugin to minimize the risk of exploitation. Avoid using the `orderby` and `order` parameters in the affected SQL statements until the issue is resolved.