Stored XSS vulnerability (CVE-2023-5118) has been found in Kofax Capture software.

A vulnerability has been found in the TCExam open source software (CVE-2023-6554).

An open redirect vulnerability has been found in the TasmoAdmin open source software (CVE-2023-6552).

CERT Poland has received a report about a SQL injection vulnerability in the PrestaShop Google Integrator software and assigned it the number CVE-2023-6921.

Stored XSS vulnerability has been found in class.upload.php open source library (CVE-2023-6551).

CERT Poland has received a report about a vulnerability in the CoolKit Technology eWeLink mobile application (Android & iOS) and assigned it the number CVE-2023-6998.

Stored XSS vulnerability has been found in SmodBIP and MegaBIP software (CVE-2023-5378).

Reflected XSS vulnerability (CVE-2023-4932) has been found in SAS 9.4 software.

CERT Poland has received a report about vulnerability in the Apereo CAS software and assigned it the number CVE-2023-4612.

Cross-Site Request Forgery vulnerability has been found in SmodBIP software (CVE-2023-4837).