Description
OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo[linkAddress]" parameter
Unscored
CVE-2022-27107
EUVD-2022-31646GHSA-rhjq-68v2-wq5j
OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo[linkAddress]" para…
Published Apr 6, 2022 · Updated Aug 3, 2024 · Assigned by mitre