CVE-2025-15560

The NesterSoft WorkTime project tracking software contains a SQL injection vulnerability in the "widget" API endpoint . An authenticated attacker with minimal permissions can exploit this flaw to inject SQL queries. The impact depends on the database backend: if Firebird is used, attackers can re...