Description The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list. References https://wordpress.org/plugins/time-sheets/#developers