EUVD-2023-34870

Malicious code in bioql PyPI...

CVE-2023-30453

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

CVE-2023-30453

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

CVE-2023-30453

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

CVE-2023-30453

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

Cross site scripting

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

Atlassian Jira Teamlead Reminder plugin 跨站脚本漏洞

Teamlead Reminder is a plugin from Teamlead, Inc. A security vulnerability exists in Atlassian Jira Teamlead Reminder plugin version 2.6.5, which originates from a stored cross-site scripting attack via the message parameter...

CVE-2023-30453

The CVE-2023-30453 entry concerns the Teamlead Reminder plugin for Jira up to version 2.6.5. The vulnerability is a persistent XSS via the message parameter, allowing injected scripts to be executed in the victim’s browser. Documented impact is client-side script execution potentially leading to ...

CVE-2023-30453

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

PT-2023-22700 · Unknown · Teamlead Reminder

Name of the Vulnerable Software and Affected Versions: Teamlead Reminder plugin for Jira versions through 2.6.5 Description: The issue allows for persistent XSS via the message parameter. This can lead to malicious scripts being executed on the client-side, potentially compromising user data or...

CVE-2023-30453

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

Malicious Package

Overview teamlead is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...