CVE-2025-15562 - Reflected Cross-Site Scripting in NesterSoft WorkTime

CVE ID : CVE-2025-15562 Published : Feb. 19, 2026, 10:54 a.m. | 1 hour, 34 minutes ago Description : The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering. This allows an attacker to execute arbitrary JavaScript in the victim's browser if the victim opens a URL prepared by the attacker. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...