PT-2023-11890

Name of the Vulnerable Software and Affected Versions EWWW Image Optimizer plugin for WordPress versions up to, and including, 5.8.1 Description The issue is due to missing or incorrect nonce validation on the ewww ngg bulk init function, making it possible for unauthenticated attackers to perfor...

The US Is Spying on the UN Secretary General

The Washington Post is reporting that the US is spying on the UN Secretary General. The reports on Guterres appear to contain the secretary generals personal conversations with aides regarding diplomatic encounters. They indicate that the United States relied on spying powers granted under the...

CVE-2023-36662

The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...

CVE-2023-36662

The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...

CVE-2023-36662: Improper Neutralization of Input During Web Page Generation

The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...

CVE-2023-36662

The CVE-2023-36662 entry concerns the TechTime User Management components for Atlassian products, which allow stored XSS on the Bulk User Actions page. Affected are: Jira User Management 2.0.0–2.17.1; Confluence User Management 2.0.0–2.15.24; Bitbucket User Management 2.2.2–2.15.24. Root cause: s...

CVE-2023-36662

The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...

PT-2023-25665 · Atlassian · User Management For Bitbucket +2

Name of the Vulnerable Software and Affected Versions: User Management for Jira versions 2.0.0 through 2.17.1 User Management for Confluence versions 2.0.0 through 2.15.24 User Management for Bitbucket versions 2.2.2 through 2.15.24 Description: The TechTime User Management components for Atlassi...

Atlassian TechTime User Management 跨站脚本漏洞

Atlassian TechTime User Management is a user management system from Atlassian Australia. A security vulnerability exists in Atlassian TechTime User Management that stems from a stored cross-site scripting vulnerability in the Bulk User Actions page...

CVE-2023-34028

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7 versions...

CVE-2023-34170

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin = 3.5.7 versions...

CVE-2023-34028

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7 versions...

CVE-2023-34170

CVE-2023-34170 : Stored XSS in the WordPress plugin “WP Overnight Quick/Bulk Order Form for WooCommerce” (versions up to 3.5.7). Root cause: insufficient sanitization/escaping of input parameters, enabling authenticated users (admin+) to inject script that can be stored and later reflected to sit...

CVE-2023-35918

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WooCommerce Bulk Stock Management plugin = 2.2.33 versions...

CVE-2023-35918

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WooCommerce Bulk Stock Management plugin = 2.2.33 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WooCommerce Bulk Stock Management plugin = 2.2.33 versions...

CVE-2023-35918 WordPress WooCommerce Bulk Stock Management Plugin <= 2.2.33 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WooCommerce Bulk Stock Management plugin = 2.2.33 versions...

CVE-2023-35918 WordPress WooCommerce Bulk Stock Management Plugin <= 2.2.33 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WooCommerce Bulk Stock Management plugin = 2.2.33 versions...

CVE-2023-35918

CVE-2023-35918 affects the WordPress plugin WooCommerce Bulk Stock Management (versions

PT-2023-25383

Name of the Vulnerable Software and Affected Versions WooCommerce Bulk Stock Management plugin versions prior to 2.2.34 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scripts into the...