Truonglv1

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bulk edit preset export/import mechanism in versions up to and including 3.35. This is due to insufficient output escaping on preset field values when they are rendered in HTML attribute contexts in the mla generate bulk edit form fieldsets() function and mla-bulk-edit-fieldsets.tpl template. While wp kses() filtering is applied during preset export for users without unfiltered html capability, this does not prevent attribute injection attacks since the malicious payload consists of quotes and HTML attributes rather than HTML tags. When preset values are retrieved and rendered, they are directly assigned to template variables without esc attr() escaping and then inserted into input element value attributes via simple string replacement. This makes it possible for authenticated attackers, with Author-level access and above (upload files capability), to inject arbitrary web scripts that execute when an administrator imports the poisoned preset and the targeted input field receives focus.

**Name of the Vulnerable Software and Affected Versions** ShopApper Mobile App Builder Service for WooCommerce WordPress plugin versions prior to 0.4.63 **Description** An issue exists where the plugin fails to verify if the requesting user owns the customer profile being queried via a REST endpoint. This allows any authenticated user, such as a customer or subscriber, to retrieve personal data of other users, including their name, email address, and roles. **Recommendations** Update the ShopApper Mobile App Builder Service for WooCommerce WordPress plugin to version 0.4.63 or later.

**Name of the Vulnerable Software and Affected Versions** ShopApper Mobile App Builder Service for WooCommerce WordPress plugin versions prior to 0.4.63 **Description** The plugin fails to verify user permissions before performing stock-update operations via a REST endpoint. This allows any authenticated user, including those with low-level roles like customer or subscriber, to modify the stock quantity of any product. **Recommendations** Update the plugin to version 0.4.63 or later.

**Name of the Vulnerable Software and Affected Versions** Smart Manager versions prior to 8.92.0 **Description** Insufficient encoding of a post field before it is rendered into an HTML attribute within the management grid allows users with the Contributor role or higher to perform a Stored Cross-Site Scripting (XSS) attack. This enables the injection of JavaScript that executes in the browser session of an administrator viewing the grid. **Recommendations** Update Smart Manager to version 8.92.0 or later.

**Name of the Vulnerable Software and Affected Versions** Feed KuantoKusta for WooCommerce – Free versions prior to 5.4 **Description** An unauthenticated SQL Injection exists due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query. This allows attackers to append additional SQL queries to existing ones to extract sensitive information from the database. **Recommendations** Update Feed KuantoKusta for WooCommerce – Free to a version newer than 5.3.