CVE-2024-53543

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint.

Published 2025-02-24. Last modified 2026-06-17.