Cross site scripting

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...

CVE-2021-38583

CVE-2021-38583 affects openBaraza HCM 3.1.6, where a failure to properly neutralize user-controllable input enables a reflected XSS vulnerability. The issue is observed on multiple pages (hr/subscription.jsp, hr/application.jsp, and hr/index.jsp with view= and data=). Root cause: inadequate input...

CVE-2021-38619: Improper Neutralization of Input During Web Page Generation

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduct a stored cross-site scripting XSS attack against an administrative user from hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view=...

CVE-2021-38583: Improper Neutralization of Input During Web Page Generation

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...

PT-2021-22225

Name of the Vulnerable Software and Affected Versions openBaraza HCM version 3.1.6 Description The issue arises from the software's failure to properly neutralize user-controllable input, leading to reflected cross-site scripting XSS on multiple pages, including hr/subscription.jsp,...

PT-2021-22251

Name of the Vulnerable Software and Affected Versions openBaraza HCM version 3.1.6 Description The issue arises from the failure to properly neutralize user-controllable input, allowing an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrativ...