CVE-2018-12234

Adrenalin Core HCM 5.4.0 HRMS software is affected by a Reflected Cross-Site Scripting (XSS) in the flexiportal/GeneralInfo.aspx?strAction parameter. The vulnerability occurs because user-supplied input containing JavaScript is echoed back inside JavaScript code in the HTML response, enabling scr...

CVE-2018-12234: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter...