EUVD-2019-2740

Malware in sbrugna...

Cross site scripting

In EasyToRecruit E2R before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting XSS injection in multiple locations...

CVE-2019-11032

In EasyToRecruit E2R before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting XSS injection in multiple locations...

CVE-2019-11032

In EasyToRecruit E2R before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting XSS injection in multiple locations...

CVE-2019-11032

CVE-2019-11032 affects EasyToRecruit (E2R) prior to 2.11, where the upload feature and Candidate Profile Management allow Cross Site Scripting (XSS) in multiple locations. The provided documents confirm an XSS type vulnerability with the described components, but do not specify exploit details, a...

CVE-2019-11032

In EasyToRecruit E2R before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting XSS injection in multiple locations...

CVE-2019-11032: Improper Neutralization of Input During Web Page Generation

In EasyToRecruit E2R before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting XSS injection in multiple locations...

PT-2019-12152

Name of the Vulnerable Software and Affected Versions EasyToRecruit E2R versions prior to 2.11 Description The issue affects the upload feature and the Candidate Profile Management feature, making them prone to Cross Site Scripting XSS injection in multiple locations. Recommendations For versions...