medium6.1
CVE-2024-36656
In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack.
Impact
In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Minthcm | Minthcm | Version 4.0.3 |