>> TAG: #0day

Avantune Genialcloud ProJ 10 – Cross-Site Scripting (XSS)

SolarView Compact 6.00 – ‘time_begin’ Cross-Site Scripting (XSS)

Real Player v.20.0.8.310 G2 Control – ‘DoGoToURL()’ Remote Code Execution (RCE)

SolarView Compact 6.00 – ‘pow’ Cross-Site Scripting (XSS)

Real Player 16.0.3.51 – ‘external::Import()’ Directory Traversal to Remote Code Execution (RCE)

WordPress Plugin Motopress Hotel Booking Lite 4.2.4 – Stored Cross-Site Scripting (XSS)

Confluence Data Center 7.18.0 – Remote Code Execution (RCE)

Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 – Remote Code Execution (RCE)

Contao 4.13.2 – Cross-Site Scripting (XSS)

Zyxel USG FLEX 5.21 – OS Command Injection