Time Accounting
1 CVEs
product
Monthly
In the project create screen it's possible to inject malicious JS code to the certain fields. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
XSS
Time Accounting
NVD
CVSS 3.1
5.4
EPSS
0.6%
EPSS 1%
CVSS 5.4
MEDIUM
This Month
In the project create screen it's possible to inject malicious JS code to the certain fields. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
XSS
Time Accounting
NVD