WS-2023-0144

Stored XSS was found in Week View Plugin in anuko/timetracker before 1.22.12.5783. An attacker can take advantage of insufficient control of the user input on the POST parameter note to inject arbitrary javascript code that will be permanently stored. In this way, the input entered by the attacke...