XSS Vulnerability in Scott Paterson Time Clock Affects Multiple Versions
CVE-2025-47516

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Time Clock
Vendor
CVE Published:
7 May 2025

What is CVE-2025-47516?

The Scott Paterson Time Clock contains a vulnerability that allows for stored cross-site scripting (XSS) attacks. Attackers can exploit this flaw by sending specially crafted inputs that are improperly sanitized during web page generation. This could lead to unauthorized script execution in the context of users accessing the affected application. Mitigation strategies include validating and sanitizing user input and ensuring that security best practices are in place.

Affected Version(s)

Time Clock <= 1.2.3

References

https://patchstack.com/database/wordpress/plugin/time-clo...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
.