FICHE CVE

CVE-2022-25014

Publiée le 2022-02-28 · Dernière modification le 2026-06-17

Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "m" parameter in the Dashboard of the current user. This vulnerability allows attackers to compromise session credentials via user interaction with a crafted link.

CVSS 3.16.1 MOYENNE

Type de faiblesse

Cross-site scripting (XSS) · CWE-79