>> CATEGORY: exploit

SuperMailer version 11.20 suffers from a denial of service vulnerability.

Online Shopping System Advanced version 1.0 suffers from code execution, cross site scripting, and remote SQL injection vulnerabilities.

WordPress Jetpack plugin version 11.4 suffers from a cross site scripting vulnerability.

HDD Health version 4.2.0.112 suffers from an unquoted service path vulnerability.

SugarSync version 4.1.3 suffers from an unquoted service path vulnerability.

Tapo C310 RTSP server version 1.3.0 suffers from an unauthorized video stream access vulnerability.

BoxBilling versions 4.22.1.55 and below suffer from a remote code execution vulnerability.

Subrion CMS version 4.2.1 suffers from a persistent cross site scripting vulnerability.

X-Skipper-Proxy version 0.13.237 suffers from a server-side request forgery vulnerability.

Label Studio versions 1.5.0 and below suffer from a server-side request forgery vulnerability.