SAKURA Internet Inc. TS Webfonts for SAKURA

• CVE-2023-32625 Unrated Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthenticated attacker to hijack the authentication of a user and to change settings by ha 0.3%
• CVE-2023-32624 Unrated Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script. 0.6%