CoreHR

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CoreHR records in CISA KEV

No CoreHR vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Core Portal · all components

TI-2019-13240 CVE-2019-18221 · GHSA-2qhf-6qrf-r83p

LOW 28

CoreHR Core Portal before 27.0.7 allows stored XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00655 Published 2019-10-25 No fix listed CWE-79