CVE-2022-3502

LOW

Human Resource Management System 1.0 - XSS

Title source: llm
STIX 2.1

Description

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210831.

References (2)

Core 2
Core References
Permissions Required, Third Party Advisory
https://vuldb.com/?id.210831

Scores

CVSS v3 3.5
EPSS 0.0046
EPSS Percentile 36.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-79 CWE-707
Status published
Products (1)
oretnom23/human_resource_management_system 1.0
Published Oct 14, 2022
Tracked Since Feb 18, 2026