CVE-2021-35045

Name of the Vulnerable Software and Affected Versions: Ice Hrm version 29.0.0.OS

Description: A cross-site scripting (XSS) issue allows attackers to execute arbitrary code via parameters to the "/app/" endpoint.

Recommendations: For Ice Hrm version 29.0.0.OS, update to a version that fixes this issue, as using vulnerable parameters in the "/app/" endpoint can lead to arbitrary code execution. As a temporary workaround, consider restricting access to the "/app/" endpoint until a patch is available. Avoid using vulnerable parameters in this endpoint to minimize the risk of exploitation.