Cross site scripting

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

CVE-2019-11559

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

CVE-2019-11559

HRworks v1.16.1 is affected by CVE-2019-11559, a reflected XSS in the Login component triggered by a crafted URL parameter. Exploitation details are not provided in the connected sources, but the Red Hat advisory and PT-Security entry confirm the reflection-based script injection as the issue. PT...

PT-2019-12379 · Hrworks · Hrworks

Name of the Vulnerable Software and Affected Versions: HRworks version 1.16.1 Description: A reflected Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component. This can be achieved by manipulating the URL to includ...

CVE-2019-11559: Improper Neutralization of Input During Web Page Generation

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...