Hrsale Cross-Site Scripting Vulnerability

Hrsale is an HRMS written in PHP by the Hrsale team. A cross-site scripting vulnerability exists in HRSALE 2.0.0. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via the admin/project/projectscalendar setdate parameter...

PT-2020-17086

Name of the Vulnerable Software and Affected Versions HRSALE version 2.0.0 Description The issue allows for XSS via the set date parameter in the "admin/project/projects calendar" endpoint. Recommendations For HRSALE version 2.0.0, avoid using the set date parameter in the "admin/project/projects...

Hrsale 跨站脚本漏洞

Hrsale is an HRMS written in PHP by the Hrsale team. A cross-site scripting vulnerability exists in HRSALE 2.0.0. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via the admin/project/projectscalendar setdate parameter...