CVE-2021-35045

Cross site scripting XSS vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ endpoint...

CVE-2021-35045

Cross site scripting XSS vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ endpoint...

CVE-2021-35045

CVE-2021-35045 is an XSS vulnerability affecting Ice Hrm 29.0.0.OS. The issue arises from unsanitized input in parameters to the /app/ endpoint, enabling attackers to inject scripts that may execute in the context of a user’s session. Documented references consistently describe Cross Site Scripti...