Lucene search
GoogleOSV:CVE-2022-28985HistoryMay 20, 2022 - 2:15 a.m.
CVE-2022-28985
2022-05-2002:15:07
Google
osv.dev
9
orangehrm
v4.10.1
stored xss
A stored cross-site scripting (XSS) vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.
Related
nvd
nvd
CVE-2022-28985
2022-05-20 02:15:07
cvelist
cvelist
CVE-2022-28985
2022-05-20 01:43:10
prion
prion
Cross site scripting
2022-05-20 02:15:00
cnvd
cnvd
OrangeHRM Cross-Site Scripting Vulnerability (CNVD-2022-68518)
2022-05-24 00:00:00
cve
cve
CVE-2022-28985
2022-05-20 02:15:07