CVE-2025-57681

MEDIO 5.4CVE-2025-57681 · Published 21/01/2026 · updated 17/06/2026

In breve

CVE-2025-57681 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda worklogpro (thestarware).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.23%, superiore al 13.7% delle vulnerabilità.
Correzione: aggiornare a 4.23.7 o successiva.

Package	Affected versions	Patched versions
worklogpro thestarware	`< 4.23.7`	`4.23.7`

Description

The WorklogPRO - Timesheets for Jira plugin in Jira Data Center before version 4.23.6-jira10 and before version 4.23.5-jira9 allows users and attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability. The vulnerability is exploited via a specially crafted payload placed in an issue's summary field

References

marketplace.atlassian.com/apps/1212626/worklogpro-timesheets-for-jira/version-history · Product
thestarware.atlassian.net/wiki/spaces/WLP/pages/3326574597/Security+Advisory+CVE-2025-57681+-+Stored+XSS+in+WorklogPRO+DC · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free