CVE-2021-41156

anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browsertoday hidden control on a few pages to collect the today's date from user browsers. Because of not checking this parameter for sanity in versions prior to 1.19.30.5601, it was possible to craf...

CVE-2021-41156 Reflected XSS vulnerability

anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browsertoday hidden control on a few pages to collect the today's date from user browsers. Because of not checking this parameter for sanity in versions prior to 1.19.30.5601, it was possible to craf...

CVE-2021-41156

The CVE-2021-41156 issue affects anuko/timetracker (Time Tracker). In versions prior to 1.19.30.5601, a browser_today hidden control exposes the user’s date and can be exploited by crafting a malicious HTML form to trigger attacker-supplied JavaScript in the user’s browser via social engineering....