A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo “> leads to cross site scripting. It is possible to launch the attack remotely but it requires authentication. Exploit details have been disclosed to the public.

The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltered_html is disallowed

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users.

Cross-site Scripting (XSS) – Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.