CVE-2025-49054 Information

Description

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in mrdenny Time Sheets allows Reflected XSS. This issue affects Time Sheets: from n/a through 2.1.3.

Reference

https://patchstack.com/database/wordpress/plugin/time-sheets/vulnerability/wordpress-time-sheets-plugin-2-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve

CNNVD-202508-1551 (Published: 2025-08-14)

Share on: