TI-2023-22037 CVE-2023-41588 · GHSA-3wrw-frxw-6j34A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows…Priority LOW 28A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the durationFormat parameter.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00476 · Published 2023-09-14 · No fix listed CWE-79