Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WebSoft HCM 跨站脚本漏洞
Vulnerability Description
WebSoft HCM是乌克兰WebSoft公司的一个人才管理和人力资源服务平台。 WebSoft HCM 2021.2.3.327版本存在安全漏洞，该漏洞源于对用户输入的处理不充分，允许经过身份验证的攻击者将任意HTML标记注入用户浏览器处理的页面，包括JavaScript编程语言中的脚本，从而导致Self-XSS。
CVSS Information
N/A
Vulnerability Type
N/A