3 matches found
CVE-2022-28985
A stored cross-site scripting XSS vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...
6.3CVSS0.00508EPSS
SaveExploits1References1
Cross site scripting
A stored cross-site scripting XSS vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...
3.5CVSS5.2AI score0.00508EPSS
SaveExploits1References1Affected Software1
20