A vulnerability has been found in NesterSoft WorkTime up to 11.8.8 and classified as problematic. This issue affects some unknown processing of the file endpoint /report/internet/urls of the component API Endpoint. This manipulation causes cross site scripting.
This vulnerability is tracked as CVE-2025-15562. The attack is possible to be carried out remotely. No exploit exists.
