TI-2025-03265 CVE-2025-3706 · GHSA-39mf-48wx-6xcc104 Corporation eHRMS - Reflected Cross-Site ScriptingPriority LOW 27The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00318 · Published 2025-04-28 · No fix listed CWE-79