EUVD-2018-18800

Malware in sbrugna...

CVE-2018-7057

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter...