| शीर्षक | Omega Solution HRM OS Latest Cross Site Scripting |
|---|
| विवरण | Omega Solution HRM OS contains a stored cross-site scripting (XSS) vulnerability in the SVG file upload functionality. The application fails to properly validate or sanitize uploaded SVG files before making them available through the media viewing component. As a result, an authenticated attacker can upload a crafted SVG file containing executable script that is stored by the application and executed within the security context of the affected origin when viewed by another user. This vulnerability may lead to the execution of arbitrary client-side script, potentially resulting in session compromise, unauthorized actions performed on behalf of the victim, content manipulation, or phishing attacks. |
|---|
| स्रोत | ⚠️ https://github.com/4m3rr0r/PoCVulDb/issues/21 |
|---|
| उपयोगकर्ता | 4m3rr0r (UID 85795) |
|---|
| सबमिशन | 17/07/2026 07:37 PM (2 महीनों पहले) |
|---|
| संयम | 20/09/2026 11:31 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 408064 [Omega Solution HRM OS तक 20260717 SVG File Upload /media/view/ क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|