CVE-2025-57681

Name of the Vulnerable Software and Affected Versions WorklogPRO - Timesheets for Jira versions prior to 4.23.6-jira10 WorklogPRO - Timesheets for Jira versions prior to 4.23.5-jira9

Description The WorklogPRO - Timesheets for Jira plugin contains a flaw that allows the injection of arbitrary HTML or JavaScript code. This is a Cross-Site Scripting (XSS) issue, where a malicious payload placed within an issue's summary field can be exploited. The vulnerability can be leveraged by both users and attackers. The vulnerable parameter is the summary field.

Recommendations Upgrade WorklogPRO - Timesheets for Jira to version 4.23.6-jira10 or later. Upgrade WorklogPRO - Timesheets for Jira to version 4.23.5-jira9 or later.