medium5.4
CVE-2021-38822
A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary execution of JavaS…
Impact
A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary execution of JavaScript commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icehrm | Icehrm | Version 30.0.0.os |