CVE-2022-3069

The WordLift WordPress plugin prior to version 3.37.2 fails to sanitise/escape settings, enabling cross-site scripting by high-privilege users (e.g., admins). CVE-2022-3069 is documented with a PoC/exploitation note in some sources; remediation is to upgrade to 3.37.2 or later.

MGASA-2022-0303 Updated unbound packages fix security vulnerability

Advisory text to describe the update. Wrap lines at 75 chars. Update to version 1.16.2 fixes many bugs along with versions 1.13.1, 1.13.2, 1.14.0, 1.15.0, 1.16.0 and 1.16.1, and protects against CVE-2022-306989...

Updated unbound packages fix security vulnerability

Advisory text to describe the update. Wrap lines at 75 chars. Update to version 1.16.2 fixes many bugs along with versions 1.13.1, 1.13.2, 1.14.0, 1.15.0, 1.16.0 and 1.16.1, and protects against CVE-2022-306989...