Cross site scripting

2021-01-2618:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

32.0%

JSON

The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19.0.00 through 19.0.20), when the “Recommend job posting” function is enabled, allows XSS via the SENDER parameter.

CPENameOperatorVersion
human_resource_management_portalge17.2.00
human_resource_management_portalle17.2.35
human_resource_management_portalge19.0.00
human_resource_management_portalle19.0.20

Name	Operator	Version
human_resource_management_portal	ge	17.2.00
human_resource_management_portal	le	17.2.35
human_resource_management_portal	ge	19.0.00
human_resource_management_portal	le	19.0.20