Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of June 2, 2025

Multiple vulnerabilities have been discovered in various products, including ABC Courier Management System, Online Notice Board, EIBPORT V3 KNX, and others. These vulnerabilities range from critical to high severity and can be exploited remotely. Some of the vulnerabilities include SQL injection, cross-site request forgery, and deserialization of untrusted data. Others involve improper neutralization of special elements, improper control of filename for include/require statements. The vulnerabilities affect various products, including WordPress plugins, desktop applications, and online management systems. The CVSS scores range from 7.1 to 9.8, indicating high to critical severity. The vulnerabilities have been disclosed to the public and may be used, while others have been addressed in recent updates. Users are advised to upgrade to the latest versions to resolve the issues. The vulnerabilities can lead to unauthorized access, execute arbitrary code, and disclose sensitive data.