CVE-2018-12651

MEDIUM 6.1CVE-2018-12651 · Published 20/12/2018 · updated 17/06/2026

In short

CVE-2018-12651 is a MEDIUM (CVSS 6.1) vulnerability affecting human resource management software (myadrenalin).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
human resource management software myadrenalin	`= 5.4.0`	No fix yet

Description

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the ShiftEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter.

References

knowcybersec.com/2018/12/CVE-2018-12651-reflected-XSS.html · Exploit
securethy.com/2018/12/CVE-2018-12651-reflected-XSS.html

More vulnerabilities in human resource management software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free