Design/Logic Flaw

2020-11-2420:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

40.7%

HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.

CPENameOperatorVersion
hrsaleeq2.0.0

CPE	Name	Operator	Version
	hrsale	eq	2.0.0

References

grimthereaperteam.medium.com/hrsale-v-2-0-0-reflected-cross-site-scripting-17a5617e2c6e

hrsale.com/update_log.php

0.001 Low

EPSS

Percentile

40.7%

Related for PRION:CVE-2020-29053