Beveiligingsadvies

CVE-2025-40685

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-29 12:12:44
Laatst bijgewerkt 2025-07-29 13:03:09
Toegewezen door INCIBE
CVSS-score 4.8
Status PUBLISHED

Beschrijving

Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searcstate' parameter in/state.php.