CVE-2022-3502: Human Resource Management System Leave cross site scripting
First published: Fri Oct 14 2022(Updated: )
A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210831.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sourcecodester Human Resource Management System | =1.0 | |
| Sourcecodester Human Resource Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-3502?
CVE-2022-3502 has been classified as problematic due to its impact on the Leave Handler component.
How do I fix CVE-2022-3502?
To fix CVE-2022-3502, ensure proper validation and sanitization of the 'Reason' argument to prevent cross site scripting.
What components are affected by CVE-2022-3502?
CVE-2022-3502 affects the Leave Handler component of the Human Resource Management System version 1.0.
Is CVE-2022-3502 exploitable remotely?
Yes, CVE-2022-3502 can be exploited remotely by manipulating the 'Reason' argument.
What type of vulnerability is CVE-2022-3502?
CVE-2022-3502 is a cross site scripting vulnerability.
- agent/references
- agent/type
- agent/author
- agent/softwarecombine
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/human resource management system project
- canonical/sourcecodester human resource management system
- version/sourcecodester human resource management system/1.0
- vendor/oretnom23