Lucene search
PRIOn knowledge basePRION:CVE-2019-1010287HistoryJul 17, 2019 - 9:15 p.m.
Cross site scripting
2019-07-1721:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
48.1%
Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a “redirect” parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url.
| CPE | Name | Operator | Version |
|---|---|---|---|
| timesheet_next_gen | le | 1.5.3 |
Related
cvelist
cvelist
CVE-2019-1010287
2019-07-17 20:02:05
nvd
nvd
CVE-2019-1010287
2019-07-17 21:15:11
cve
cve
CVE-2019-1010287
2019-07-17 21:15:11
nuclei
nuclei
Timesheet Next Gen <=1.5.3 - Cross-Site Scripting
2020-09-04 10:01:06