CVE-2025-13584

Eigenfocus (≤ 1.4.0) has a cross-site scripting vulnerability in the Description Handler. Manipulating entry.description/time_entry.description allows remote script injection. Publicly disclosed exploit information exists. Remediation: upgrade to version 1.4.1 (patch ID 7dec94c9d1f3e513e0ee38ba68...