Unrated severityNVD Advisory· Published Jan 21, 2026· Updated Jan 21, 2026

CVE-2025-57681

Description

The WorklogPRO - Timesheets for Jira plugin in Jira Data Center before version 4.23.6-jira10 and before version 4.23.5-jira9 allows users and attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability. The vulnerability is exploited via a specially crafted payload placed in an issue's summary field

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Worklogpro Timesheets For Jirainferred
Range: <4.23.6-jira10, <4.23.5-jira9
Package: https://wordpress.org/plugins/worklogpro---timesheets-for-jira
WorklogPRO/Timesheets for Jirallm-create
Range: <4.23.6-jira10, <4.23.5-jira9

Patches

Vulnerability mechanics

References

marketplace.atlassian.com/apps/1212626/worklogpro-timesheets-for-jira/version-historymitre
thestarware.atlassian.net/wiki/spaces/WLP/pages/3326574597/Security+Advisory+CVE-2025-57681+-+Stored+XSS+in+WorklogPRO+DCmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000