← Back

Timesheet Next Gen

timesheet_next_gen

Vendor: Timesheet Next Gen Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-1010287
1Timesheet Next Gen Project
1Timesheet Next Gen
Jun 17, 2026
Jul 17, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login for...Show more
Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url.Show less