Lucene search
K

36 matches found

CNNVD
CNNVD
added 2026/01/12 12:0 a.m.3 views

WorkDo HRM SaaS HR and Payroll Tool 跨站脚本漏洞

WorkDo HRM SaaS HR and Payroll Tool is a human resource management software from WorkDo, Inc. WorkDo HRM SaaS HR and Payroll Tool suffers from a cross-site scripting vulnerability that stems from insufficient validation of user input for the replydescription parameter when sending a POST request ...

5.1CVSS5.9AI score0.00046EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/12 12:0 a.m.4 views

WorkDo HRMGo 跨站脚本漏洞

WorkDo HRMGo is a human resource management platform from WorkDo Inc. in the United States. WorkDo HRMGo suffers from a cross-site scripting vulnerability that stems from insufficient validation of user input for the subject and description parameters when sending a POST request to /store-ticket,...

5.1CVSS5.8AI score0.00046EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/12 12:0 a.m.3 views

PT-2026-1799

Name of the Vulnerable Software and Affected Versions WorkDo's TicketGo affected versions not specified Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The issue involves sending a POST request to the ''/ticketgo-saas/home'' API...

5.1CVSS5.8AI score0.00046EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/01/12 12:0 a.m.3 views

PT-2026-1798

Name of the Vulnerable Software and Affected Versions WorkDo HRMGo affected versions not specified Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The issue involves sending a POST request to the /hrmgo/ticket/changereply API...

5.1CVSS5.8AI score0.00046EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/01/12 12:0 a.m.1 views

WorkDo HRMGo 跨站脚本漏洞

WorkDo HRMGo is a human resource management platform from WorkDo, Inc. in the United States. WorkDo HRMGo suffers from a cross-site scripting vulnerability that stems from insufficient validation of user input for the description parameter when sending a POST request to /hrmgo/ticket/changereply,...

5.1CVSS5.8AI score0.00046EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/12 12:0 a.m.3 views

WorkDo HRM SaaS HR and Payroll Tool 跨站脚本漏洞

WorkDo HRM SaaS HR and Payroll Tool is a human resource management software from WorkDo, Inc. WorkDo HRM SaaS HR and Payroll Tool suffers from a cross-site scripting vulnerability that stems from insufficient validation of user input for the description parameter when sending a POST request to...

5.1CVSS5.9AI score0.00046EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/12 12:0 a.m.3 views

PT-2026-1800

Name of the Vulnerable Software and Affected Versions WorkDo eCommerceGo affected versions not specified Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The issue is triggered by sending a POST request to the /store-ticket API...

5.1CVSS5.9AI score0.00046EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/11/05 9:9 a.m.5 views

CVE-2025-63294

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users...

6.5CVSS6.8AI score0.00036EPSS
Exploits1References1
OSV
OSV
added 2025/11/04 4:16 p.m.2 views

CVE-2025-63294

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users...

6.5CVSS5.8AI score0.00036EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/11/04 12:0 a.m.6 views

CVE-2025-63294

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users...

0.00036EPSS
Exploits1References3
CVE
CVE
added 2025/11/04 12:0 a.m.7 views

CVE-2025-63294

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected by an Insecure Permissions issue. An authenticated user can create leave or resignation records on behalf of other users due to improper permission settings. Documents across multiple sources (NVD, Red Hat, CNNVD, CVE catalogs, and security feed...

6.5CVSS6.4AI score0.00036EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/04 12:0 a.m.2 views

CVE-2025-63294

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users...

6.4AI score0.00036EPSS
Exploits1References3
EUVD
EUVD
added 2025/11/04 12:0 a.m.2 views

EUVD-2025-37760

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users...

6.5CVSS6.3AI score0.00036EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.3 views

PT-2025-45014

Name of the Vulnerable Software and Affected Versions WorkDo HRM SaaS HR and Payroll Tool version 8.1 Description WorkDo HRM SaaS HR and Payroll Tool version 8.1 has an issue with insecure permissions. An authenticated user is able to create leave or resignation records for other users...

6.5CVSS6.6AI score0.00036EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.3 views

WorkDo HRM SaaS HR and Payroll Tool 安全漏洞

WorkDo HRM SaaS HR and Payroll Tool is a human resource management software from WorkDo, Inc. A security vulnerability exists in WorkDo HRM SaaS HR and Payroll Tool version 8.1, which stems from improperly set permissions and could result in an authenticated user creating leave or resignation...

6.5CVSS6.6AI score0.00036EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.3 views

WorkDo CRMGo 跨站脚本漏洞

WorkDo CRMGo is a project, accounting, lead, transaction and human resource management tool from WorkDo, Inc. A cross-site scripting vulnerability exists in WorkDo CRMGo version 7.2 and prior versions, which stems from a cross-site scripting vulnerability contained in the notes parameter in the...

5.4CVSS4.5AI score0.00166EPSS
Exploits1References4
Rows per page
Query Builder