Lucene search
MitreCVELIST:CVE-2022-27107HistoryApr 06, 2022 - 2:39 p.m.
CVE-2022-27107
2022-04-0614:39:35
mitre
www.cve.org
4
orangehrm
4.10
stored xss
share video
orangebuzz
get
post
createvideo
linkaddress
parameter
EPSS
0.001
Percentile
24.8%
OrangeHRM 4.10 is vulnerable to Stored XSS in the “Share Video” section under “OrangeBuzz” via the GET/POST “createVideo[linkAddress]” parameter
Related
osv
osv
CVE-2022-27107
2022-04-06 15:15:07
cve
cve
CVE-2022-27107
2022-04-06 15:15:07
prion
prion
Design/Logic Flaw
2022-04-06 15:15:00
nvd
nvd
CVE-2022-27107
2022-04-06 15:15:07