CVE-2021-25838

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...

Design/Logic Flaw

A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing...

Cross site scripting

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...

CVE-2021-25839

MintHCM 3.0.8 exposes a weak password requirement in the Create New User flow, enabling easier brute-forcing of new accounts. The root cause is insufficient password policy enforcement in user creation; impact is elevated risk of account compromise. Exploitation details are not provided in the co...

CVE-2021-25839

A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing...

CVE-2021-25838

MintHCM Release 3.0.8 contains an XSS vulnerability in the Import feature during file-upload. The issue arises from the Import functionality allowing an attacker to inject and execute JavaScript in uploaded content, enabling cross-site scripting. Impact is limited to XSS as described in multiple ...

CVE-2021-25838

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...

PT-2021-16813

Name of the Vulnerable Software and Affected Versions MintHCM version 3.0.8 Description The issue concerns the Import function, which allows an attacker to execute a cross-site scripting XSS payload through file-upload. This could potentially lead to malicious script execution on the client-side...

MintHCM 跨站脚本漏洞

MINTHCM is a human resources management software developed by MINTHCM MintHCM A cross-site scripting vulnerability exists in version 3.0.8. The vulnerability stems from the Import feature that allows an attacker to perform cross-site scripting XSS loads in file uploads, which can be exploited by ...

CVE-2021-25838: Improper Neutralization of Input During Web Page Generation

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...

PT-2021-16814

Name of the Vulnerable Software and Affected Versions MintHCM version 3.0.8 Description A weak password requirement vulnerability exists in the Create New User function, which could lead an attacker to easier password brute-forcing. Recommendations For MintHCM version 3.0.8, consider implementing...

CVE-2021-25839: Weak Password Requirements

A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing...

MINTHCM 安全漏洞

MINTHCM is a MINTHCM open source application. A human resource management software. A weak password requirement vulnerability exists in the Create New User function in MintHCM RELEASE version 3.0.8, which can be exploited by an attacker to brute-force password cracking...