CVE-2025-70368

Worklenz version 2.1.5 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Project Updates feature. An attacker can submit a malicious payload in the Updates text field which is then rendered in the reporting view without proper sanitization. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/Stolichnayer/CVE-2025-70368	Exploit Third Party Advisory
https://github.com/Worklenz/worklenz	Product
https://github.com/Stolichnayer/CVE-2025-70368	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:worklenz:worklenz:2.1.5:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-01-26 19:16

Updated : 2026-06-17 10:03

NVD link : CVE-2025-70368

Mitre link : CVE-2025-70368

CVE.ORG link : CVE-2025-70368

JSON object : View

Products Affected

worklenz

worklenz

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2025-70368", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-70368", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-27T19:52:25.041913Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-01-26T19:16:09.410", "references": [{"url": "https://github.com/Stolichnayer/CVE-2025-70368", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/Worklenz/worklenz", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/Stolichnayer/CVE-2025-70368", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Worklenz version 2.1.5 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Project Updates feature. An attacker can submit a malicious payload in the Updates text field which is then rendered in the reporting view without proper sanitization. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field."}, {"lang": "es", "value": "La versi\u00f3n 2.1.5 de Worklenz contiene una vulnerabilidad de cross-site scripting (XSS) almacenado en la funci\u00f3n de Actualizaciones de Proyecto. Un atacante puede enviar una carga \u00fatil maliciosa en el campo de texto de Actualizaciones que luego se renderiza en la vista de informes sin la sanitizaci\u00f3n adecuada. JavaScript malicioso puede ejecutarse en el navegador de una v\u00edctima cuando navegan a la p\u00e1gina que contiene el campo vulnerable."}], "lastModified": "2026-06-17T10:03:19.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:worklenz:worklenz:2.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48FF55F8-48B0-4EA7-B6E5-5C58D978F4A4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}