Skip to content
OpenAdvisories

Vendor

HRSALE

1 known vulnerabilities.

Products

HRSALE 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2020-37145

    HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)

    HRSALE 1.1.8 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized administrative users through the employee registration form. Attackers can craft a malicious HTML page with hidden form fields to trick authenticated ad…

    HRSALE HRSALE