A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary execution of JavaScript commands...
5.4CVSS6.5AI score0.00743EPSS
SaveExploits1References1
NVD•added 2018/06/14 9:29 p.m.•16 views
CVE-2018-12420
IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request...
