CVE-2021-25838

Name of the Vulnerable Software and Affected Versions MintHCM version 3.0.8

Description The issue concerns the Import function, which allows an attacker to execute a cross-site scripting (XSS) payload through file-upload. This could potentially lead to malicious script execution on the client-side.

Recommendations For MintHCM version 3.0.8, consider disabling the Import function temporarily until a patch is available to prevent potential XSS attacks. Restrict access to file-upload features to minimize the risk of exploitation.