CVE-2018-12651

CVE-2018-12651 : A reflected XSS vulnerability was reported in Adrenalin HRMS Software v5.4.0 where user-supplied input is echoed into JavaScript in the response of ShiftEmployeeSearch.aspx via the prntFrmName or prntDDLCntrlName parameters. The issue is triggered when crafted input is reflected ...