Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/07/31 1:49 p.m.4 views

CVE-2025-40684

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccountry' parameter in/country.php...

6.1CVSS6.3AI score0.00158EPSS
Exploits0References1
NVD
NVD
added 2025/07/29 1:15 p.m.4 views

CVE-2025-40684

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccountry' parameter in/country.php...

6.1CVSS0.00158EPSS
Exploits0References1
Circl
Circl
added 2025/07/29 12:44 p.m.3 views

CVE-2025-40684

creationtimestamp| type| source ---|---|--- 2025-07-29 12:44:32+00:00| seen| Telegram/jfpFPwqgVUwkg6RjTp21lPbVnIHB6K4JFPZhhdy-MWUG7N4...

6.1CVSS4.8AI score0.00158EPSS
Exploits0
Cvelist
Cvelist
added 2025/07/29 12:12 p.m.13 views

CVE-2025-40684 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccountry' parameter in/country.php...

4.8CVSS0.00158EPSS
Exploits0References1
CVE
CVE
added 2025/07/29 12:12 p.m.18 views

CVE-2025-40684

The CVE-2025-40684 entry describes a Reflected XSS vulnerability in the Human Resource Management System (HRMS) version 1.0. The flaw allows an attacker to execute arbitrary JavaScript in a victim’s browser by supplying a crafted URL that targets the searccountry parameter in the /country.php end...

6.1CVSS5.8AI score0.00158EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder