Cross-Site Scripting Vulnerability in Orange HRM by OrangeHRM
CVE-2013-1353

5.4MEDIUM

Key Information:

Vendor

Orangehrm

Status
Orangehrm
Vendor
CVE Published:
10 February 2020

What is CVE-2013-1353?

A Cross-Site Scripting (XSS) vulnerability exists in Orange HRM version 2.7.1, which allows attackers to inject malicious scripts via the vacancy name field. This could lead to unauthorized actions performed on behalf of users or the exposure of sensitive data.

References

https://packetstormsecurity.com/files/119461/OrangeHRM-2....
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.