Unscored CVE-2022-25013 EUVD-2022-29759GHSA-8pf3-gxq5-866q

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the "key" and "fm" parameters…

Published Feb 28, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the "key" and "fm" parameters in the component login.php.

References

https://github.com/gamonoid/icehrm/issues/284