CVE-2022-25015
A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the First...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the First Name field.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com