Approved changes feed: RSS · Atom

cpe:2.3:a:thestarware:worklogpro:*:*:*:*:*:jira:*:*

part: a version: * update: *

VendorThestarware (87cd73f0-e88e-5702-90d0-9d093e5853e4)
ProductWorklogpro (c5ff8250-3a62-5ee9-9b5a-1ea42eb06616)
Edition*
Language*
Software edition*
Target softwarejira
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-57681 vulnerable 2026-06-08 07:33:15.980955 Details available
The WorklogPRO - Timesheets for Jira plugin in Jira Data Center before version 4.23.6-jira10 and before version 4.23.5-jira9 allows users and attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability. The vulnerability is exploited via a specially crafted payload placed in an issue's summary field
Published: 2026-01-21T00:00:00.000Z
Updated: 2026-01-21T16:26:13.307Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.