3 matches found
CVE-2019-11559
A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component.
CVE-2019-16416
HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.
CVE-2019-16417
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.