Cross site scripting

A Reflected Cross Site Scripting XSS vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter...

CVE-2018-12653

CVE-2018-12653 affects Adrenalin HRMS/Core HCM 5.4.0. A Reflected Cross-Site Scripting (XSS) exists on the page at RPT/SSRSDynamicEditReports.aspx via the ReportId parameter, where user-supplied input is echoed back in the HTML response. The vulnerability allows an attacker to submit malicious Ja...

PT-2019-8915

Name of the Vulnerable Software and Affected Versions Adrenalin HRMS version 5.4.0 Description A Reflected Cross Site Scripting issue exists, allowing an attacker to input malicious JavaScript code in the "/RPT/SSRSDynamicEditReports.aspx" API endpoint via the ReportId parameter. Recommendations...

CVE-2018-12653: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter...