CVE-2023-6282

Mô tả

Tham khảo

• incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-icehrm · Third Party Advisory

Lỗ hổng khác của icehrm

• CVE-2022-26588TRUNG BÌNH 6.5A Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/s…
• CVE-2022-25015TRUNG BÌNH 5.4A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into…
• CVE-2022-25014TRUNG BÌNH 6.1Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "m" parameter in the Dashboard of t…
• CVE-2022-25013TRUNG BÌNH 6.1Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the "key" and "fm" parameters …
• CVE-2021-38823NGHIÊM TRỌNG 9.8The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin …