< 27.0.7
27.0.7
CoreHR Core Portal before 27.0.7 allows stored XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.