CVE-2021-34243

Name of the Vulnerable Software and Affected Versions: Ice Hrm version 29.0.0.OS

Description: A stored cross site scripting (XSS) issue was discovered, allowing attackers to execute arbitrary web scripts or HTML via a crafted file uploaded into the Document Management tab. The exploit is triggered when a user visits the upload location of the crafted file.

Recommendations: For Ice Hrm version 29.0.0.OS, consider disabling the file upload feature in the Document Management tab until a patch is available to prevent exploitation. Restrict access to the Document Management tab to minimize the risk of arbitrary web script execution.