PT-2025-31193
CVE-2025-40684
·
Publicado
2025-07-29
·
Atualizado
2026-04-30
Descrição por
CVSS 2.0
7.8
AltaMétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Human Resource Management System version 1.0
Description
Reflected Cross-Site Scripting (XSS) exists in Human Resource Management System version 1.0. This issue could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL. The vulnerability is triggered through the
searccountry parameter in the /country.php endpoint.Recommendations
Human Resource Management System version 1.0: Sanitize the
searccountry parameter in the /country.php endpoint to prevent the injection of malicious JavaScript code.Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾