The time-sheets plugin prior to 1.5.2 for WordPress has multiple XSS issues.
time sheets project time sheets