CVE-2023-6282

creationtimestamp| type| source ---|---|--- 2024-01-25 13:21:24+00:00| seen| https://t.me/ctinow/173428 2024-02-18 14:11:54+00:00| seen| https://t.me/ctinow/187249...

CVE-2023-6282 Cross-Site Scripting vulnerability in IceHrm

IceHrm 23.0.0.OS does not sufficiently encode user-controlled input, which creates a Cross-Site Scripting XSS vulnerability via /icehrm/app/fileuploadpage.php, in multiple parameters. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload and partially...

CVE-2023-6282

IceHrm 23.0.0.OS contains an XSS vulnerability in /icehrm/app/fileupload_page.php caused by insufficient encoding of user-controlled input across multiple parameters. An attacker could deliver a crafted JavaScript payload to partially hijack a victim’s browser. Exploitation details are not provid...