CVE-2019-18221

CoreHR Core Portal before 27.0.7 allows stored XSS...

CVE-2019-18221

CoreHR Core Portal before 27.0.7 allows stored XSS...

CVE-2019-18221

Vulnerability CVE-2019-18221 affects CoreHR Core Portal prior to version 27.0.7, where a stored XSS flaw exists in the web app. The underlying issue is lack of proper validation/exposure of client-side data, enabling an attacker to inject and execute script in the user’s browser. Public sources (...