CVE-2019-25064 CoreHR Core Portal cross-site request forgery

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It i...

Cross site scripting

CoreHR Core Portal before 27.0.7 allows stored XSS...

CoreHR Core Portal Cross-Site Scripting Vulnerability

CoreHR Core Portal is a human resource management system. A cross-site scripting vulnerability exists in CoreHR Core Portal versions prior to 27.0.7. The vulnerability stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execut...