Time Sheets

Time Sheets has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2025; 3 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF), Server-Side Request Forgery (SSRF).

3 of the records (50%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all Time Sheets vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2013-6880

Time Sheets <= 2.1.3 - Use of Known Vulnerable Component

Read the full analysis

Vulnerability Records

6 records


2025-12-04 17:30	Time Sheets <= 2.1.3 - Use of Known Vulnerable Component Time Sheets <= 2.1.3	`CVE-2013-6880`	7.2 High	Athiwat Tiprasaharn (Jitlada)	No
2025-12-04 17:30	Time Sheets <= 2.1.3 - Cross-Site Request Forgery Time Sheets <= 2.1.3	`CVE-2025-10055`	4.3 Medium	Aurélien BOURDOIS (Elymaro)	No
2025-08-13 00:00	Time Sheets <= 2.1.3 - Reflected Cross-Site Scripting Time Sheets <= 2.1.3	`CVE-2025-49054`	6.1 Medium	Nguyen Xuan Chien	No
2023-03-20 00:00	Time Sheets <= 1.29.2 - Authenticated(Admin+) Stored Cross-Site Scripting Time Sheets <= 1.29.2	`CVE-2023-0893`	4.4 Medium	Shreya Pohekar	Yes
2017-02-19 00:00	Time Sheets < 1.5.2 - Cross-Site Scripting Time Sheets < 1.5.2	`CVE-2017-18582`	6.1 Medium	Anonymous	Yes
2017-02-17 00:00	Time Sheets < 1.5.0 - Reflected Cross-Site Scripting Time Sheets < 1.5.0	`CVE-2017-18581`	6.1 Medium	Anonymous	Yes

Showing 1–6 of 6 reports