CVE-2021-41434: Stored Cross-Site Scripting Vulnerability in Expense Management System by EGavilan MediaStored XSS in EGavilan Media's Expense Management System allows arbitrary JavaScript execution via expense description.
CVE-2021-41432: Stored Cross-Site Scripting Vulnerability in the Blog Content in FlatPressStored XSS vulnerability in FlatPress 1.2.1 allows arbitrary JavaScript execution via crafted post content.