Talentera 代码注入漏洞

Talentera is a comprehensive AI-driven recruiting software from Talentera. A code injection vulnerability exists in Talentera 20241128 and earlier versions, which stems from the parameter redirecturl in the file /app/control/bytcvmanager can lead to a cross-site scripting attack...

CVE-2024-12346: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Talentera up to 20241128 and classified as problematic. This vulnerability affects unknown code of the file /app/control/bytcvmanager. The manipulation of the argument redirecturl leads to cross site scripting. The attack can be initiated remotely. The exploit ha...