OrangeHRM /index.php/performance/saveReview Cross-Site Scripting Vulnerability

OrangeHRM is an open source human resource management tools , features include employee data management , employee self-service system , attendance , allowances and recruitment and other functions . OrangeHRM suffers from a cross-site scripting vulnerability due to /index.php/performance/saveRevi...