CVE-2017-18590

The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues...

EUVD-2017-9703

Malware in sbrugna...

CVE-2017-18590

The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues...

Cross site scripting

The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues...

CVE-2017-18590

The CVE-2017-18590 issue affects the WordPress Timesheet plugin up to version 0.1.5. The connected nuclei template confirms multiple XSS flaws in the Timesheet plugin, with an impact where authenticated attackers can run arbitrary JavaScript in victims’ browsers, potentially compromising sessions...