2 matches found
CVE-2021-41156 Reflected XSS vulnerability
anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browsertoday hidden control on a few pages to collect the today's date from user browsers. Because of not checking this parameter for sanity in versions prior to 1.19.30.5601, it was possible to craf...
6.8CVSS6.9AI score0.00494EPSS
SaveExploits0References1
Anuko TimeTracker 跨站脚本漏洞
Anuko TimeTracker is Anuko an open source application . Provides a Web-based open source time tracking application written in PHP. A cross-site scripting vulnerability exists in anuko timetracker that stems from the time tracker using the browsertoday hidden control on several pages to collect...
6.8CVSS5.5AI score0.00494EPSS
SaveExploits0References2
20