Tickets

Request by: Joseph Kelly (jkelly@workingsol.com)

Submitted Date: 5/1/2024
Department:
Request Type: Graphics
Requested Completion Date: 5/8/2024
Priority: High

I need two images

1. A graphic representation of a computer with icons around it depicting key components like RAM, hard drive, and Wi-Fi signal. This helps visualize what the scan checks. This is on a section titled “Why a PC Scan?”.

2. A padlock symbol on a digital background or a shield icon with a checkmark. This is to depict a universal symbols for security and privacy, reinforcing the message of data protection on a section titled “Your Privacy Comes First”.

Width of these images should be 540px. Height can be same 540px or slightly taller, maybe 600px or so. Width is the only important measurement here.

I have attached the page where these images will be located and they are “greyed” out.

• Vyne-Applicant-PC-Scan-_1400px-Viewport-scaled.jpg

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 4/23/2024
Department:
Request Type: Icons
Requested Completion Date: 4/30/2024
Priority: High

We were alerted today that references to client Biotel are being changed to parent company Phillips. Talent needs are square listing and hero image for Vyne postings. Phillips images provided by operations team are attached.

• Phillips-logos.docx

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 4/19/2024
Department:
Request Type: Graphics
Requested Completion Date: 4/23/2024
Priority: High

We will be posting a new Intuit line of business early next week – Intuit SBSEG Sales, more commonly known as Quickbooks Sales. I do not know if there is a specific logo for this line of biz, but know we need something slightly different to identify it apart from Quickbooks Online (QBO) support. I am attaching the images we have/use for QBO for reference.

Needed – square logo and Hero image for Vyne postings.

Thank you!

• Quickbooks-square-listing.jpg
• IntuitSBSEG-_VyneHeroImage.jpg

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 4/12/2024
Department:
Request Type: Graphics
Requested Completion Date: 4/20/2024
Priority: Medium

The Coming Soon Vyne image could use some verbiage updates. The current version is attached.
We would like the green verbiage to instead say, “Our jobs are currently full. Check back frequently for new listings.”

• Check-back-square-listing.png

Request by: Brandon Molina (bmolina@workingsol.com)

Submitted Date: 4/1/2024
Department:
Request Type: Marketing: Other
Requested Completion Date: 4/5/2024
Priority: Medium

Kim made a video for the PRO’s to be placed on the Vyne April 8th. Need any editing of that video appropriate before having it posted. Video was sent via email.

Request by: Courtney Miller (cmiller@workingsol.com)

Submitted Date: 3/28/2024
Department:
Request Type: Graphics
Requested Completion Date: 4/5/2024
Priority: Low

We need to create some icons for a few new spaces in The Loop…

1. Book Club
2. Client Programs
3. Personal Leave
4. Generic – maybe the WSOL logo/mark
5. Program Success sub-group – RTA
6. Program Success sub-group – Performance Success
7. Branding (in case we do this space)

• icon-sample.png

Request by: Patti Jensen (pjensen@workingsol.com)

Submitted Date: 3/5/2024
Department:
Request Type: Graphics
Requested Completion Date: 3/6/2024
Priority: High

We have signed a new client, WellBe Senior Medical (https://www.wellbe.com/) Please create/borrow artwork we can use for the program launch deliverables (e.g. Sharepoint site, job posting, support documents, etc.) We need this soon to put all our deliverables in place. Thank you!

Request by: Kristin Kercheval (kkercheval@workingsol.com)

Submitted Date: 2/27/2024
Department:
Request Type: Graphics
Requested Completion Date: 2/23/2024
Priority: Medium

Good afternoon. This is the request for a 2 Vyne banners introducing the new look and feel of Vyne. One that we need as soon as possible in current Vyne banner size and then a second (same banner) one for 3.4.2024 – 440×275 (8:5 aspect ratio) – Focus is on new and fresh look with more navigation space.

Request by: Becky Grant (bgrant@workingsol.com)

Submitted Date: 2/6/2024
Department:
Request Type: Graphics
Requested Completion Date: 2/6/2024
Priority: Top

We have signed a new client: Wedgewood Pharmacy ( https://www.wedgewoodpharmacy.com/ ). Please create/borrow artwork we can use for the program launch deliverables (e.g. SharePoint site, job posting, support documents, etc.). This client is launching on an accelerated timeline, so the sooner the better. Thank you!

Request by: Courtney Miller (cmiller@workingsol.com)

Submitted Date: 1/16/2024
Department:
Request Type: Icons
Requested Completion Date: 1/19/2024
Priority: Low

We would like to add a “solidarity ” badge for the loop for those employees who choose to sign the WSOL Solidarity Pledge. This would be identical to the first set of badges that marketing created – size and style.

icon (200px x 200px)

Please reach out for any additional information that might be needed.

Request by: Taylor Trosclair (ttrosclair@workingso.com)

Submitted Date: 12/12/2023
Department:
Request Type: Graphics
Requested Completion Date: 12/15/2023
Priority: High

Hi Marketing,

I have attached the 2024 PRO Proposed Payments Calendar. Please create a visually pleasing calendar that we can post on the Vyne for our PRO’s to know when they will get paid 🙂 Thank you so much!!

• 2024-Proposed-Payment-Calendar.xlsx

Request by: Courtney Miller (cmiller@workingsol.com)

Submitted Date: 10/18/2023
Department:
Request Type: Presentations
Requested Completion Date: 10/21/2023
Priority: High

PPT cover page for Open Enrollment presentation. One slide only.

• WSOL-2023-Benefits-Presentation-FINAL.pdf

Request by: Ken Wheeley (kwheeley@workingsol.com)

Submitted Date: 10/18/2023
Department:
Request Type: Graphics
Requested Completion Date: 11/30/2023
Priority: Medium

We were discussing our current (and future) PC specifications and I looked at Arise’s website and found the attached document.

We like the way it looks (and the information). Could we work with your team on creating something similar? It’s easy to read and covers the same things that we’re looking for regarding the specs.

As per our discussion, we will be creating something similar to the attached document (using Canva) for our own tech requirements to be embedded on the FAQs page and on the full tech resources page of the jobs website.

• example_tech_requirements.pdf

Request by: Nichole Clary (nclary@workingsol.com)

Submitted Date: 10/17/2023
Department:
Request Type: Graphics
Requested Completion Date: 11/1/2023
Priority: Medium

Hi,
We are looking for a branded version of a logo that was included in a PCI Compliance email notification. Attached is what has been used in the past for reference. Please let me know if you need any additional information.

• PCICompliance.png

Request by: Helen Bessette (hbessette@workingsol.com)

Submitted Date: 10/6/2023
Department:
Request Type: Video/Motion Graphics
Requested Completion Date: 10/13/2023
Priority: Medium

Hello Marketing!!

As Halo is launching, we will be doing morning meeting videos we are calling Halo Morning Walk. We would be very grateful to get an awesome intro video that is about 20 to 25 seconds long.

No particular requirements other than a peppy tune and fun graphics.

Please reach out if you have any questions.

Helen Bessette 🙂

Request by: Oscar Galvan (OGALVAN@WORKINGSOL.COM)

Submitted Date: 9/28/2023
Department:
Request Type: Graphics
Requested Completion Date: 9/30/2023
Priority: High

We have signed a new client: Halo Collar ( https://www.halocollar.com/ ). Please create/borrow artwork we can use for the program launch deliverables (e.g. SharePoint site, job posting, support documents, etc.).

Request by: Kristin Kercheval (kkercheval@workingsol.com)

Submitted Date: 9/20/2023
Department:
Request Type: Graphics
Requested Completion Date: 9/20/2023
Priority: High

Already spoke with Rachel on this banner needed for Vyne for Mary Susan for recruiting on HyVee. We need a banner to raise awareness of opportunity. This roster for this project needs to be filled by Tuesday the 26th. Thank you 🙂

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 9/19/2023
Department:
Request Type: Icons
Requested Completion Date: 9/19/2023
Priority: Top

We will be posting the new, temporary HyVee program in the next day or two and will need these images for the Vyne posting. I have attached a square listing I found and will use it if acceptable. I do not have a HyVee “hero” banner.
Thank you!

• Hyvee-square-listing.png

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 9/12/2023
Department:
Request Type: Web Development
Requested Completion Date: 9/15/2023
Priority: Low

More links have been found with http instead of https

• image.png

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 9/8/2023
Department:
Request Type: Web Development
Requested Completion Date: 9/15/2023
Priority: Low

curl -sikX GET “https://jobs.workingsolutions.com/blog/4-books-recommended-for-achieving-work-at-home-success/” | grep -i “http://amzn.to/2utRtdp” || echo false
curl -sikX GET “https://wsjobsstage.wpengine.com/blog/working-in-a-virtual-world-weigh-your-options/” | grep -i “http://blogs.wsj.com/washwire/2014/01/15/for-recent-grads-good-jobs-really-are-hard-to-find/” || echo false
curl -sikX GET “https://wsmarketing.info/” | grep -i “http://codecanyon.net/user/tiva_theme/portfolio” || echo false
curl -sikX GET “https://brand.workingsolutions.com/wsol-components/alerts-and-messages/” | grep -i “http://codepen.io” || echo false
curl -sikX GET “https://workingsolutions.com/resources/?resources_cat=collateral” | grep -i “http://info.workingsolutions.com/retail-whitepaper-download” || echo false
curl -sikX GET “https://worsolstaging.wpengine.com/benefits/business-continuity/” | grep -i “http://info.worsolstaging.wpengine.com/filter-page” || echo false

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 8/31/2023
Department:
Request Type: Graphics
Requested Completion Date: 9/6/2023
Priority: Medium

Please create a “square listing” and “hero banner” for the Opportunities pages with the new imaging for “Datalot by Centerfield”. Thank you!

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 7/31/2023
Department:
Request Type: Advertisement
Requested Completion Date: 8/8/2023
Priority: Medium

Please create a Vyne banner for Stand Up To Cancer that says Join via the Opportunities Page rather than “coming soon” as is currently showing. Thanks!

Request by: Tracey Sloan (tsloan@workingsol.com)

Submitted Date: 7/25/2023
Department:
Request Type: Graphics
Requested Completion Date: 8/8/2023
Priority: Medium

The IT, ISS and Strategy Teams are getting together for a team meeting in September.
We have come up with a theme – ExtRADordinary IT ‘23 (incorporating our RAD theme)
Could you create a graphic that also has Working Solutions and/or our logo? We likely will have tshirts made. Thanks!!

Request by: Rory Slaughter (rslaughter@workingsol.com)

Submitted Date: 7/11/2023
Department:
Request Type: Advertisement
Requested Completion Date: 7/12/2023
Priority: High

Hello,

Please review the below, we want to get an initial communication out to the PRO community via the Vyne Home page regarding Stand Up To Cancer. Kristie has asked for this to be completed asap.

Thank you and please let me know if you have any questions,
Rory

• UNTITLED.pptx

Request by: Oscar Galvan (ogalvan@workingsol.com)

Submitted Date: 7/6/2023
Department:
Request Type: Graphics
Requested Completion Date: 7/7/2023
Priority: High

We are launching a new program (FLTCIP) under the FedPoint umbrella. Please provide us artwork, we can use for the launch deliverables (e.g. posting, internal website, support documents, etc.) for our new program launch. This will be a rapid program launch thus a rapid response would be greatly appreciated. I uploaded a jpg of the artwork from one of their sites but it doesn’t scale well.

• FLTCIP.jpg

Request by: Christina M Wallace (blondeprogrammer@gmail.com)

Submitted Date: 7/6/2023
Department:
Request Type: Web Development
Requested Completion Date: 7/11/2023
Priority: Medium

Does this work for the official logo in Vyne?

https://plugin.intuitcdn.net/one-intuit-help-hub-conf/1.155.2/assets/component/navbar/assets/qbo-icon.svg

Thanks,
Christy

Request by: Mary Susan Costa (mscosta@workingsol.com)

Submitted Date: 7/6/2023
Department:
Request Type: Graphics
Requested Completion Date: 7/10/2023
Priority: High

Our new line of business, QuickBooks Online Support will need images for the Applicant Portal, Vyne, and other ads. “Square listing”, “Hero image” and possibly others.

Request by: Tracey Sloan (tsloan@workingsol.com)

Submitted Date: 5/24/2023
Department:
Request Type: Presentations
Requested Completion Date: 6/6/2023
Priority: High

Ashok has an outline and I have a few visuals that we will need to include, however, they need design and layout help for Kim to send to the board. I will schedule a meeting for us to review/discuss early next week.

Request by: Helen Bessette (hbessette@workingsol.com)

Submitted Date: 5/22/2023
Department:
Request Type: Graphics
Requested Completion Date: 5/22/2023
Priority: High

HI Ronnie!
We are celebrating 9 YEARS with our APFM client! The anniversary is next week. 😊 I know this is last minute, but as we brainstorm, we may need your help!

• Could you create an APFM 9 Year Anniversary banner to post on the Vyne home page?
• Would you be able to create a picture collage of our agents who submit an “APFM Smile” to us? We could have them in by Wednesday to post / email to our pros on Friday.

Let me know your thoughts on these items.
Thank you!
Angie

Request by: Jeanise Buck (jbuck@workingsol.com)

Submitted Date: 5/10/2023
Department:
Request Type: Marketing: Other
Requested Completion Date: 5/31/2023
Priority: Low

Hi Team! Our committee (Lauren Helgeson, Scott Wenzel, Torrie Marshall and myself) would like to work with Marketing to create the Program Matrix for our PROs. We are also open to suggestions on the naming of it. I discussed this with Ronnie a few months ago and we have received the go ahead from the Sr. Leadership team.

Our committee’s thoughts is that this will be posted for the PROs via a link on the Vyne > Opportunities Page. The link will take them to a page with all client’s listed (using the program Logo) and then when they click on the program they want to learn more about it will take them to a page with that programs information found on the attached spreadsheet.

If it would be easier to set up a time to meet with us to discuss this and answer questions, we’d be happy to meet. Thank you!!

• Programs-Matrix.xlsx

Request by: Connie Maitland (cmaitland@workingsol.com)

Submitted Date: 5/3/2023
Department:
Request Type: Graphics
Requested Completion Date: 5/5/2023
Priority: Medium

I couldn’t find the HEX/RGB numbers for the gradient colors on the Colors & Themes page. Can you tell me where I can find them?
Thanks~

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 4/17/2023
Department:
Request Type: Web Development
Requested Completion Date: 4/30/2023
Priority: High

Target: stage.workingsolutions.com
Issue: Certificate Invalid Hostname
Instance Detail: abm.bakersmartpages.com

Description
The hostname of the certificate does not match.
Risk
A man-in-the-middle attacker can exploit this vulnerability in tandem with a DNS cache poisoning attack to lure the client to
another server, and then steal all the encryption communication.
https://en.wikipedia.org/wiki/Man-in-the-middle_attack
Recommendation
Use a certifcate with a matching hostname.

How to Renew SSL Certificate? Four Simple Steps

Detail Output
abm.bakersmartpages.com

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 4/17/2023
Department:
Request Type: Web Development
Requested Completion Date: 4/30/2023
Priority: Medium

Description
In order to prevent a breach, the detected secret must be removed from the public-facing javascript. This is important as any
malicious actors who have access to this key will now have access to sensitive information which could be used to compromise a
system or gain unauthorized access.
Risk
Leaving a private key in public facing Javascript can be highly dangerous, as it would expose the key to anyone who has access to
the code. This could lead to malicious actors gaining access to the associated account or service, and potentially using the private
key for activities such as stealing funds or data, manipulating or even destroying digital assets, and more. Additionally, leaving a
private key exposed may also increase the risk of hacking attempts on other services related to that same private key.
Recommendation
To ensure security, the code should be thoroughly reviewed and modi”ed to remove any secrets that are not meant to be publicly
accessible. Additionally, rigorous security measures should be implemented to protect against future attempts at breaching
sensitive data.
Detail Output
{“Redacted”:””,”DetectorType”:249,”Veri”ed”:false,”SourceMetadata”:{“Data”:{“Filesystem”:{“”le”:”/tmp/tsscanner/20230414/202304141810XYFmjI2pboP7Qat9mJIB/website/script/orig/279d05873432f2d14ac653f8aea91918.js”}}},”SourceID”:15,
“SourceType”:15,”StructuredData”:null,”SourceName”:”truLehog –
“lesystem”,”DecoderName”:”PLAIN”,”Raw”:”leadinModal.leadinModal-theme-top.leadinModalv0.leadinModal”,”ExtraData”:null,”DetectorName”:”Float”}
URI
https://js.hsleadflows.net/leadflows.js

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 4/17/2023
Department:
Request Type: Web Development
Requested Completion Date: 4/30/2023
Priority: Medium

Description
The cookie is missing security attributes.
HTTP Cookies
https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
Chrome tool to verify the issue.
Press Command+Option+C (Mac) or Control+Shift+C (Windows, Linux, Chrome OS), then “Application” >>> “Cookies”
Risk
An attacker may compromise clients due to missing cookie security attributes.
HttpOnly
https://en.wikipedia.org/wiki/HTTP_cookie#Http-only_cookie
Secure
https://en.wikipedia.org/wiki/HTTP_cookie#Secure_cookie
Same-site
https://en.wikipedia.org/wiki/HTTP_cookie#Same-site_cookie
Recommendation
Apply the following security attributes to the cookie.
HttpOnly
This restriction mitigates the threat of cookie theft via cross-site scripting (XSS).
Secure
This makes the cookie less likely to be exposed to cookie theft via eavesdropping.
Same-site
This will effectively mitigate cross-site request forgery (CSRF) attacks.
Detail Output
Name: _fbp
Domain:.com
Path: /
Detail: Medium Risk: Missing Secure Flag

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 4/17/2023
Department:
Request Type: Web Development
Requested Completion Date: 4/29/2023
Priority: Medium

Description
The headers are missing security directives.
HTTP Headers
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers
Acceptable Risk
Many organizations have compensating controls and opt-out of using header directives.
Chrome DevTools script to verify the issue.
Press Command+Option+J (Mac) or Control+Shift+J (Windows, Linux, Chrome OS), run script in console.
var xmlhttp = new XMLHttpRequest();
xmlhttp.open(“HEAD”, document.URL, true);
xmlhttp.onreadystatechange = function() {
if (xmlhttp.readyState == 4) {
console.log(xmlhttp.getAllResponseHeaders());
}
};
xmlhttp.send();
Risk
An attacker may leverage this missing security header to perform cross-site scripting (XSS) attacks.
content-security-policy
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
Recommendation
Apply the following security directives to the header.
Content-Security-Policy: ;
Detail Output
None
URI
https://workingsolutions.com/resources/?resources_cat=article

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 4/17/2023
Department:
Request Type: Web Development
Requested Completion Date: 4/30/2023
Priority: High

Description
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB
database.
WordPress is a;ected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition
between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.
A;ected Versions:
WordPress versions 6.1.1 and prior
QID Detection Logic:
This issue sends an HTTP GET request and checks for vulnerable version of WordPress running on the target application.
Risk
Successful exploitation of these vulnerabilities could allow an attacker to execute requests to systems in the internal
network to reveal sensitive information of the server with blind Server Side Request Forgery (SSRF) via DNS Rebinding.
Recommendation
Customers are advised to referblog.sonarsource.com or WPScan security advisory
Detail Output
comment: WordPress 6.1.1 was detected at https://workingsolutions.com/
N/A
URI

Home

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 4/17/2023
Department:
Request Type: Web Development
Requested Completion Date: 4/30/2023
Priority: High

Description
jQuery UI is a collection of GUI widgets, animated visual e;ects, and themes implemented with jQuery (a JavaScript
library), Cascading Style Sheets, and HTML.
The web application is using a JavaScript library that is known to contain at least one vulnerability.
Risk
Attackers could potentially exploit the vulnerability in the JavaScript library. The impact of a successful exploit depends
on the nature of the vulnerability and how the web application makes use of the library.
Recommendation
Please refer to the information provided in the response section. Also check the vendor’s security advisories related to
the vulnerable version of the library.
Detail Output
Vulnerable javascript library: jQuery.ui.tooltip
version: 1.10.3
Details:
CVE-2021-41182 : jQuery-UI versions before 1.13.0 are vulnerable to Cross-Site Scripting(XSS) attacks. Please refer to vendor
documentation (https://blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/) for latest security updates.
———————————————-
CVE-2021-41183 : jQuery-UI versions before 1.13.0 are vulnerable to Cross-Site Scripting(XSS) attacks. Please refer to vendor
documentation (https://blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/) for latest security updates.
———————————————-
CVE-2021-41184 : jQuery-UI versions before 1.13.0 are vulnerable to Cross-Site Scripting(XSS) attacks. Please refer to vendor
documentation (https://blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/) for latest security updates.
———————————————-
CVE-2022-31160 : jQuery UI is a curated set of user interface interactions, e;ects, widgets, and themes built on top of
jQuery.
Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input
enclosed within a label makes that parent label contents considered as the input label. Calling “.checkboxradio( “refresh”
)” on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This
can lead to potentially executing JavaScript code.
The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap
all the non-input contents of the “label” in a “span”.
Found on the following pages (only rst 10 pages are reported):

Home

https://workingsolutions.com/?s=1

Accessibility Statement

Home

Our Corporate Responsibility

https://workingsolutions.com/?s=discovery&submit=1

Accessibility Statement

Our Corporate Responsibility

Solutions

https://workingsolutions.com/customer-retention-driving-sales-and-maintaining-sales-base/
URI

Home

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 4/17/2023
Department:
Request Type: Web Development
Requested Completion Date: 4/30/2023
Priority: High

Description
Handlebars compiles templates into JavaScript functions..
The web application is using a JavaScript library that is known to contain at least one vulnerability.
Risk
Attackers could potentially exploit the vulnerability in the JavaScript library. The impact of a successful exploit depends
on the nature of the vulnerability and how the web application makes use of the library.
Recommendation
Please refer to the information provided in the response section. Also check the vendor’s security advisories related to
the vulnerable version of the library.
Detail Output
Vulnerable javascript library: Handlebars
version: 1.0.rc.1
Details:
Handlebars template (with version before 1.0.0.beta.3) that used user input in an HTML attribute value was wide open to a
trivial XSS exploit. Note that unquoted attribute values are still open to attack, but this set of characters at least brings
Handlebars in line with other Mustache implementations and other template languages.
(https://github.com/wycats/handlebars.js/pull/68)
Solution: Handlebars version 1.0.0 addresses the issue. Please refer to vendor documentation
(https://github.com/wycats/handlebars.js/blob/master/release-notes.md) for the latest security updates.
———————————————-
In Handlebars version below 4.0.0, quoteless attributes in templates can lead to XSS.
(https://github.com/wycats/handlebars.js/pull/1083).
Solution: Handlebars version 4.0.0 addresses the issue. Please refer to vendor documentation
(https://github.com/wycats/handlebars.js/blob/master/release-notes.md) for the latest security updates.
———————————————-
In Handlebars version below 4.3.0, the calling of helperMissing and blockHelperMissing directly from a template is
exploitable with Remote-Code-Execution. In order to harden Handlebars against such exploit, calling of helperMissing and
blockHelperMissing directly from a template is disallowed. Also Handlebars version prior to 4.3.0 are a;ected by CVE-2019-
19919. Please refer vendor documentation (https://github.com/wycats/handlebars.js/blob/master/release-notes.md#v430–
-september-24th-2019, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19919) for the latest security updates.
———————————————-
Handlebars version below 4.5.3, are vulnerable to prototype pollution where templates may alter Object properties thus
leading to Remote-Code-Execution using crafted payloads. In order to prevent Remote-Code-Execution the properties
__proto__, __deneGetter__, __deneSetter__ and __lookupGetter__ have been added to the list of properties that must be
enumerable. Please refer vendor documentation (https://github.com/wycats/handlebars.js/blob/master/releasenotes.md#v453—november-18th-2019) for latest security updates.
Found on the following pages (only rst 10 pages are reported):

Careers

Careers

Careers

Careers

URI

Careers

Request by: Craig Flowers (cflowers@workingsol.com)

Submitted Date: 4/17/2023
Department:
Request Type: Web Development
Requested Completion Date: 4/30/2023
Priority: High

Same Site Scripting
Target workingsolutions.com Instance 1 of 1
Port http/https Severity
First Found 2023-03-31 18:16 Risk 100
Scan Date 2023-04-14 11:10 Prevelence
Description
Most of the DNS servers include records of the form localhost. IN A 127.0.0.1 But if by mistake, the administrator misses
the trailing dot, the record is not fully qualied. So if the domain is example.com, the queries for localhost.example.com
would resolve to 127.0.0.1. Reference: https://seclists.org/bugtraq/2008/Jan/270
Risk
The websites in a;ected domain cannot be securely accessed on multi-user system. The attacker can trick another user on
the same system to access websites on a;ected domain in such a manner as to result in cross site scripting leaking
cookies.
Recommendation
Non fully qualied localhost entries should not be present in the nameserver for domains that host websites with HTTP
state management (cookies).
Detail Output
Same site scripting detected
Host: localhost.workingsolutions.com IP: 127.0.0.1

Request by: Taylor Kane (tkane@workingsol.com)

Submitted Date: 4/13/2023
Department:
Request Type: Presentations
Requested Completion Date: 4/18/2023
Priority: Top

I had an introductory meeting with the City of Memphis who is seeking potential support for 311, 211, and IT help desk services. The Chief of HR at the City of Memphis, Alex Smith, has requested 3 additional slides.

1.) What the term “BPO” means and the value it brings to a municipal environment. I would like for this slide to drive value on how we can handle overflow, outage, or seasonal support (Memphis has a ton of bad weather that makes them have longer than normal hold times and there’s a huge issue with recruiting quality candidates to work these agent roles). After speaking with April, I also told them we could hire from the city and make jobs for tax payers. However, at the same time, Alex said we need to make sure it doesn’t have the tone of taking current jobs or the directors will be hesitant.

2.) Program support we have provided for logos on the sales deck ppt as well as the 2020 NY 311 program we supported. I’ve attached screenshots of an email with all the program names/details.

3.) A slide with my business card for when this presentation is shared internally.

She’s asked for this by Monday morning. If there’s an issue or anything I can do to contribute to the presentation please let me know.

Thank you!

• 257ED37D-3987-40C3-801E-620B87BF48D0.png
• A3935187-AED4-4F93-A638-03B7E5475D8E.png

Request by: Ken Wheeley (kwheeley@workingsol.com)

Submitted Date: 4/4/2023
Department:
Request Type: Web Design
Requested Completion Date: 4/7/2023
Priority: Medium

We would like to make some changes to the FAQ section on our website (jobs.workingsolutions.com/faq).

Here’s what we’d like to change/edit:

– “Devices not acceptable:”
o Current: “Tablet-based/convertible personal computers (i.e. – Microsoft Surface, Surface Book), Chromebooks and mobile phones (unless needed for two-factor authentication) are not acceptable”
o Proposed: “Tablet-based/convertible personal computers (i.e. – Microsoft Surface, Surface Book), Chromebooks, Steam Decks and mobile phones (unless needed for two-factor authentication) are not acceptable”
– “Operating Systems:”
o Proposed: Remove the sub-bullet that begins, “Note: Some client systems are not fully compatible with Windows 11,…”
– “What antivirus protection do I need?”
o Current: “Working Solutions recommends using Microsoft Defender Antivirus, which is included with all modern versions of Windows and is free to use. It is not necessary to purchase or use third-party antivirus products, as these may be incompatible with client software programs and prevent access.”
o Proposed: “It is not necessary to purchase or use a third-party antivirus program. In many cases, these are not compatible with our client’s software and can prevent access. Working Solutions recommends using Microsoft Defender which is included with all modern versions of Windows.”
– “What if I am using an older version of Windows?”
o Current: “We do not support Windows 95, 98, ME, 2000, XP, Vista or Windows 7”
o Proposed: “We do not support Windows 95, 98, ME, 2000, XP, Vista, Windows 7, Windows 8 or Windows 8.1”
– “Web Browser:”
o Current: “Most commonly, you’ll use Google Chrome, but some applications still use Internet Explorer 11, which is built into Windows 10. Other browsers you may be asked to use are:…”
o Proposed: “Most commonly, you will use Google Chrome. Other browsers you may be asked to use are:….”
– “Processor classes explicitly not supported:”
o Proposed: Add a new bullet that says, “Qualcomm’s Snapdragon or any ARM/RISC based processor”
– “Internal Storage”
o Current: “At least 50 GB free space available”
o Proposed: Add a bullet point in the beginning of the text and add another bullet point (see below)
 “At least 50 GB free space available”
 “Working Solutions recommends the use of SSDs (Solid State Drives) when possible”
– “Are there any internet providers known to be incompatible?”
o Proposed:
 Under the “Satellite” bullet, make the next line (“examples: HughesNet, Starlink”) a sub-bullet of “Satellite”
 Under “Cellular broadband”, add this as the first sub-bullet:
• “examples: T-Mobile or Verizon Wireless”

Request by: Christi Keating (ckeating@workingsol.com)

Submitted Date: 4/3/2023
Department:
Request Type: Advertisement
Requested Completion Date: 4/4/2023
Priority: Top

Vyne home page banner needed to promote the upcoming PRO lunch in May. Kim has requested this launch ASAP. Event colors/theme in purple with bright flowers.

Fiesta in Ft Worth
May 2, 2023
11:30 am – 1:30 pm
La Puertita at Joe T Garcia’s
Register on the PRO Community / Calendar of Events

Request by: Courtney Miller (cmiller@workingsol.com)

Submitted Date: 3/22/2023
Department:
Request Type: Icons
Requested Completion Date: 4/1/2023
Priority: Low

Please create icons to match the current branded icons within The Loop for our new 2023 goals.

The page these will be used can be found on this link (to replace the current blue icons): https://theloop.workvivo.com/goals/browse/organisation

Request by: Kelli Bercik (kbercik@workingsol.com)

Submitted Date: 2/24/2023
Department:
Request Type: Icons
Requested Completion Date: 3/31/2023
Priority: Low

Hi AMAZING and creative Team!

I would love to request an emoji that has the word “Missing” on it. It could be used for missing in class or missing assignments (it might appear confused or is looking around). I’m not in any rush, but I believe that it could most certainly be used on the Ed/Dev side 😊.

Thank you for your consideration!

Have a wonderful day!

Request by: April Wiita (awiita@workingsol.com)

Submitted Date: 2/23/2023
Department:
Request Type: Presentations
Requested Completion Date: 2/23/2023
Priority: Low

Good Morning-
Is it possible to create a Word Template that the teams can use for basic needs like sharing updates, goals, etc? I would love for it to be basic and include our new branding, but be a flexible document. Attached is an example of what I would like to use the document for.

Thank you,
Anita Wiita

• 2023-PS-Team-Goals.docx

Request by: Kim Houlne (kim@workingsol.com)

Submitted Date: 2/7/2023
Department:
Request Type: Presentations
Requested Completion Date: 2/7/2023
Priority: High

Hi there,

Can I please have a slide in brand with the acronym – RAD

Thank you!

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 1/31/2023
Department:
Request Type: Marketing: Other
Requested Completion Date: 2/14/2023
Priority: Medium

Internal collateral to be used to “advertise” the TurboTax Blitz to our active PRO community. Include TurboTax graphic(s) for interest.
Key items to note for PRO community

Peak Weekend Staffing need April 15 – 18
Peak Day Staffing need with increased pay
Work 5 or more hours on Peak day, receive an additional $10 per hour worked on Peak day
(i.e. – work 6 hours on April 18th, get $0.30/minute PLUS ($10 per hour X6 hours)
Must have previously completed a TurboTax background check

More info to come!

Request by: Kahla Dupuis (kdupuis@workingsol.com)

Submitted Date: 1/24/2023
Department:
Request Type: Video/Motion Graphics
Requested Completion Date: 3/31/2024
Priority: Medium

We would love to create onboarding videos for new employees to eliminate the current onboarding calls. Due to our growing company this has become something we need to scale. We’d love to set-up an initial conversation to discuss the project and possible timeframe.

Request by: Tamara Schroer (tschroer@workingsol.com)

Submitted Date: 1/5/2023
Department:
Request Type: Presentations
Requested Completion Date: 1/7/2023
Priority: High

We need a new education team slide that doesn’t include photos of the team

Request by: Catherine Becker (cbecker@workingsol.com)

Submitted Date: 1/3/2023
Department:
Request Type: Advertisement
Requested Completion Date: 1/14/2023
Priority: Low

These are flyers Catherine hands out at the office when random people come by inquiring about work-from-home. This could use some rewording too.

• 20230103_103303-scaled.jpg
• 20230103_103331-scaled.jpg

Request by: Oscar Galvan (OGALVAN@WORKINGSOL.COM)

Submitted Date: 1/3/2023
Department:
Request Type: Graphics
Requested Completion Date: 1/3/2023
Priority: High

Please provide artwork we can use for the launch deliverables (e.g. posting, internal website, support documents, etc.) for our new Southwest Airlines ( https://www.southwest.com/ ) customer launch . This will be a very rapid program launch thus a rapid response would be greatly appreciated.

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 12/20/2022
Department:
Request Type: Video/Motion Graphics
Requested Completion Date: 1/31/2023
Priority: Medium

As we move to 100% recorded interviews (vs. live phone interviews) we have a need for a short, professional video to insert into the Video Interview process that educates applicants on what they should expect as I.C.s. This information is key information shared during the (current) live interviews with a recruiting professional. In the absence of that interaction, the video needs to educate. Script in process, please add this task to the video creation to-do list. Thanks!

Request by: Angie Kronlage (akronlage@workingsol.com)

Submitted Date: 12/16/2022
Department:
Request Type: Graphics
Requested Completion Date: 12/22/2022
Priority: Low

HI Ronnie!
I’d love to include a WSOL themed holiday image in a client “Happy Holidays” email send.
Thank you,
Angie

Request by: Taylor Trosclair (ttrosclair@workingsol.com)

Submitted Date: 12/12/2022
Department:
Request Type: Graphics
Requested Completion Date: 12/16/2022
Priority: High

Hi Marketing,

I have attached the 2022 Agent Payments Calendar and also the dates we would like for the 2023 PRO Payments Calendar. Please create a visually pleasing calendar that we can post on the Vyne for our PRO’s to know when they will get paid 🙂 Thank you so much!!

• 2023-Proposed-Calendar.xlsx
• 2022-Payments-Calendar.pdf

Request by: Mary Susan Costa (mscosta@workingsol.com)

Submitted Date: 12/2/2022
Department:
Request Type: Icons
Requested Completion Date: 12/5/2022
Priority: High

We have a separate line of business we will recruit for Toyota starting on Monday, 12/5. This LOB needs its own ICON to differentiate the posting.

Toyota Connected
Back Office

Request by: Elijah Carpenter (ecarpenter@workingsol.com)

Submitted Date: 12/2/2022
Department:
Request Type: Photography
Requested Completion Date: 12/6/2022
Priority: Low

Requesting images from the following collection. Planning on using for holiday / seasonal themed emails, Teams backgrounds, and Vyne announcements.

https://www.shutterstock.com/catalog/collections/2984420896111854848-469cd05b93d51b01ea9448e42936372a02f00add58c672233c2195d2a6da0956

Request by: Mary-Susan Costa (mscosta@workingsol.com)

Submitted Date: 12/1/2022
Department:
Request Type: Icons
Requested Completion Date: 12/5/2022
Priority: High

For this client, we will be recruiting Spanish PROs and French Canadian PROs. Will you please create additional ICON images for each of those languages? They will be different postings and we want to highlight the language needs.

• Toyota-connected-bilingual-sample.png

Request by: Oscar Galvan (OGALVAN@WORKINGSOL.COM)

Submitted Date: 12/1/2022
Department:
Request Type: Icons
Requested Completion Date: 12/2/2022
Priority: Medium

We have a new client, Medline ( www.medline.com ). Please provide us artwork, like you did for Tauck and Boscov’s, we can use for the launch deliverables (e.g. posting, internal website, support documents, etc.) for our new customer launch. This will be a rapid program launch thus a rapid response would be greatly appreciated.

Request by: Ronnie Myers (rmyers@workingsol.com)

Submitted Date: 11/16/2022
Department:
Request Type: Graphics
Requested Completion Date: 11/6/2022
Priority: Medium

Here are some details on our first ticket.