CVE-2018-12653

MEDIUM 6.1CVE-2018-12653 · Published 25/03/2019 · updated 17/06/2026

In short

CVE-2018-12653 is a MEDIUM (CVSS 6.1) vulnerability affecting adrenalin (myadrenalin).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
adrenalin myadrenalin	`= 5.4.0`	No fix yet

Description

A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter.

References

packetstormsecurity.com/files/155244/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
knowcybersec.com/2019/02/CVE-2018-12653-reflected-XSS.html · Exploit
securethy.com/2019/02/CVE-2018-12653-reflected-XSS.html

More vulnerabilities in adrenalin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free