TI-2019-12346 CVE-2019-16417 · GHSA-g9fj-wcmm-j9x3
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.
Priority LOW 26
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.
3 records
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.
HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.
A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component.