CVE-2018-12652

CVE-2018-12652 affects Adrenalin eSystems HRMS Software (version 5.4). The vulnerability is a Reflected XSS in the LeaveEmployeeSearch.aspx page, where user input passed via the parameters prntFrmName and prntDDLCntrlName is echoed back into JavaScript in an HTML response. Impact described as the...