| Titre | Pbrong hrms 1.0.1 Stored Cross Site Scripting Vulnerability |
|---|
| Description | Pbrong/hrms has a Stored Cross Site Scripting vulnerability. This vulnerability is due to the fact that the UpdateRecruitmentById function under hrms1.0.1/handler/recruitment.go does not filter the parameters passed by the user, resulting in the system being able to parse javascript and S Tored Cross Site Scripting vulnerability. |
|---|
| La source | ⚠️ https://github.com/TheLiao233/cve/issues/1 |
|---|
| Utilisateur | Guozhao Liao (UID 94408) |
|---|
| Soumission | 12/01/2026 10:14 (il y a 9 mois) |
|---|
| Modérer | 18/01/2026 21:32 (6 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 341755 [pbrong hrms 1.0.1 /handler/recruitment.go UpdateRecruitmentById cross site scripting] |
|---|
| Points | 19 |
|---|