PT-2025-35440
CVE-2025-9569
·
Published
2025-09-01
·
Updated
2025-09-01
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾