medium6.1
CVE-2021-25838
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.
Impact
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Minthcm | Minthcm | Version 3.0.8 |