Description
Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), attackers can inject arbitrary command into the system and launch XSS attack.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_confirm
https://www.chtsecurity.com/news/30772cf1-2e7e-4afe-9282-b5a196b22e71
Third Party Advisory x_refsource_confirm
https://www.twcert.org.tw/tw/cp-132-3449-c87d8-1.html
Scores
CVSS v3
6.1
EPSS
0.0024
EPSS Percentile
47.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (2)
sun/ehrd
8.0
sun/ehrd
9.0
Published
Mar 27, 2020
Tracked Since
Feb 18, 2026