Stored Cross-Site Scripting Vulnerability in Worklenz by Worklenz
CVE-2025-70368
5.4MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-70368?
Worklenz version 2.1.5 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability located within the Project Updates feature. This flaw allows an attacker to inject a malicious payload into the Updates text field. When any user accesses the reporting view of the affected application, the unsanitized input can lead to the execution of harmful JavaScript in the user's browser, posing a significant security risk.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.