Description Orange HRM 2.7.1 allows XSS via the vacancy name. References https://packetstormsecurity.com/files/119461/OrangeHRM-2.7.1-Cross-Site-Scripting.html