CVE-2023-3589

A Cross-Site Request Forgery CSRF vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server...

CVE-2023-3588

A stored Cross-site Scripting XSS vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code...

PT-2023-25359 · No Magic · Teamwork Cloud

Name of the Vulnerable Software and Affected Versions: Teamwork Cloud versions No Magic Release 2021x through No Magic Release 2022x Description: A stored Cross-site Scripting XSS issue allows an attacker to execute arbitrary script code. Recommendations: For versions No Magic Release 2021x throu...