PT-2019-8915

Name of the Vulnerable Software and Affected Versions Adrenalin HRMS version 5.4.0 Description A Reflected Cross Site Scripting issue exists, allowing an attacker to input malicious JavaScript code in the "/RPT/SSRSDynamicEditReports.aspx" API endpoint via the ReportId parameter. Recommendations...

CVE-2018-12653: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter...