9 matches found
CVE-2021-38619
CVE-2021-38619 openBaraza HCM HR Payroll v.3.1.6 Unauthenticated Stored XSS Vulnerability openBaraza HCM v.3.1.6 does not properly neutralize user-controllable input, this could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative...
Cross site scripting
openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...
CVE-2021-38583
CVE-2021-38583 affects openBaraza HCM 3.1.6, where a failure to properly neutralize user-controllable input enables a reflected XSS vulnerability. The issue is observed on multiple pages (hr/subscription.jsp, hr/application.jsp, and hr/index.jsp with view= and data=). Root cause: inadequate input...
Exploit for Cross-site Scripting in Openbaraza Openbaraza_Human_Capital_Management
CVE-2021-38619 openBaraza HCM HR Payroll v.3.1.6 Unauthenticat...
CVE-2021-38619: Improper Neutralization of Input During Web Page Generation
openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduct a stored cross-site scripting XSS attack against an administrative user from hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view=...
PT-2021-22225
Name of the Vulnerable Software and Affected Versions openBaraza HCM version 3.1.6 Description The issue arises from the software's failure to properly neutralize user-controllable input, leading to reflected cross-site scripting XSS on multiple pages, including hr/subscription.jsp,...
PT-2021-22251
Name of the Vulnerable Software and Affected Versions openBaraza HCM version 3.1.6 Description The issue arises from the failure to properly neutralize user-controllable input, allowing an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrativ...
CVE-2021-38583: Improper Neutralization of Input During Web Page Generation
openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...