CVE-2021-38619

CVE-2021-38619 openBaraza HCM HR Payroll v.3.1.6 Nicht authentifizierte Stored-XSS-Schwachstelle openBaraza HCM v.3.1.6 neutralisiert benutzergesteuerte Eingaben nicht ordnungsgemäß, was es einem nicht authentifizierten Remote-Angreifer ermöglichen könnte, eine Stored-Cross-Site-Scripting...

Cross site scripting

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...

CVE-2021-38583

CVE-2021-38583 affects openBaraza HCM 3.1.6, where a failure to properly neutralize user-controllable input enables a reflected XSS vulnerability. The issue is observed on multiple pages (hr/subscription.jsp, hr/application.jsp, and hr/index.jsp with view= and data=). Root cause: inadequate input...