Stored XSS vulnerability has been found in class.upload.php open source library (CVE-2023-6551).

CERT Poland has received a report about a vulnerability in the CoolKit Technology eWeLink mobile application (Android & iOS) and assigned it the number CVE-2023-6998.

Stored XSS vulnerability has been found in SmodBIP and MegaBIP software (CVE-2023-5378).

Reflected XSS vulnerability (CVE-2023-4932) has been found in SAS 9.4 software.

CERT Poland has received a report about vulnerability in the Apereo CAS software and assigned it the number CVE-2023-4612.

Cross-Site Request Forgery vulnerability has been found in SmodBIP software (CVE-2023-4837).

CERT Poland has received a report about vulnerability in the UptimeDC software and assigned it the number CVE-2023-4997.

CERT Poland has received a report about vulnerability in the lua-http Library and assigned it the number CVE-2023-4540.