CVE-2018-12234

MEDIUM 6.1CVE-2018-12234 · Published 06/09/2018 · updated 17/06/2026

In short

CVE-2018-12234 is a MEDIUM (CVSS 6.1) vulnerability affecting adrenalin (myadrenalin).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
adrenalin myadrenalin	`= 5.4.0`	No fix yet

Description

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter.

References

packetstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
knowcybersec.com/2018/09/first-cve-2018-12234-reflected-XSS.html · Exploit
securethy.com/2018/09/first-cve-2018-12234-reflected-XSS.html
thecysec.in/2020/04/xxs-adrenalin-generalinfo-cve-id.html · URL Repurposed

More vulnerabilities in adrenalin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free