CVE-2025-47516

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Time Clock time-clock allows Stored XSS.This issue affects Time Clock: from n/a through = 1.2.3...

CVE-2025-47516

CVE-2025-47516 concerns the WordPress Time Clock plugin by Scott Paterson. Multiple connected sources confirm a stored XSS vulnerability arising from improper neutralization of input during web page generation, affecting Time Clock versions up to 1.2.3 (and earlier). The core issue is cross-site ...