Vulnerabilities

TI-2024-24361 CVE-2024-36656 · GHSA-3xmm-gqgf-3954

In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a…

MEDIUM 60

In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00301 Published 2024-06-14 No fix listed CWE-79

TI-2021-07892 CVE-2021-25839 · GHSA-gmp2-cx4g-4hx8

A weak password requirement vulnerability exists in the Create New User function of…

MEDIUM 44

A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01183 Published 2021-04-26 No fix listed CWE-521

TI-2021-07891 CVE-2021-25838 · GHSA-9mhc-p2p5-344j

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site…

LOW 28

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00586 Published 2021-04-26 No fix listed CWE-79

Vulnerabilities

Filters

In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a…

A weak password requirement vulnerability exists in the Create New User function of…

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site…