CVE-2019-1010287

Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS)

published July 17, 2019

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04300 · 91.1th percentile
Published
2019-07-17T20:02Z
EPSS history
Timeline
  • 17 JUL 20:02Z
    Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS)
    cvelistv5