Meta4 HR Cross-Site Scripting Vulnerability

Cegid Meta4 HR is a human resource management software HRM platform from Cegid Corporation. A cross-site scripting vulnerability exists in Meta4 HR version 819.001.022 and earlier, which stems from a cross-site scripting XSS vulnerability in the endpoint /sitetest/english/dumpenv.jsp...

PT-2024-21353 · Meta4 · Meta4 Hr

Name of the Vulnerable Software and Affected Versions: Meta4 HR versions 819.001.022 and earlier Description: A Cross-Site Scripting issue has been identified. The endpoint "/sitetest/english/dumpenv.jsp" is vulnerable to an XSS attack via the lang query. For example, the URL...