Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Time_tracking_software | Scheduling_management.com | 3.0 (including) | 3.0 (including) |