Code injection

The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list...

CVE-2017-18581

CVE-2017-18581 affects the WordPress Time Sheets plugin. The vulnerability is a cross-site scripting (XSS) issue via the old timesheet list in versions before 1.5.0 (and related sources note continued risk for

PT-2019-8515

Name of the Vulnerable Software and Affected Versions WordPress time-sheets plugin versions prior to 1.5.0 Description The issue concerns a Cross-Site Scripting XSS problem. It is related to the old timesheet list in the time-sheets plugin for WordPress. Recommendations For versions prior to 1.5....