CVE-2022-25013

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

CVE-2022-25013

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

CVE-2022-25013: Improper Neutralization of Input During Web Page Generation

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

PT-2022-17046

Name of the Vulnerable Software and Affected Versions Ice Hrm version 30.0.0.OS Description The issue is related to multiple reflected cross-site scripting XSS vulnerabilities. These vulnerabilities are exploited via the key and fm parameters in the component login.php. Recommendations For Ice Hr...

Ice Hrm cross-site scripting vulnerability

Ice Hrm is a human resource management system. Ice Hrm version 30.0.0.OS is vulnerable to a cross-site scripting vulnerability that stems from a lack of checksum filtering of user-supplied data and output data in the key and fm parameters in the component login.php. An attacker could exploit this...