Medium severity6.1NVD Advisory· Published Sep 14, 2023· Updated Jun 17, 2026
CVE-2023-41588
CVE-2023-41588
Description
A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the durationFormat parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=10.13.5+ 1 more
- (no CPE)range: <=10.13.5
- (no CPE)
- cpe:2.3:a:appfire:time_to_sla:10.13.5:*:*:*:*:jira:*:*
Patches
Vulnerability mechanics
References
1- github.com/xsn1210/poc2/blob/main/xss%5BTime%20to%20SLA%5D.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.