CVE-2017-17989

Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-12-30

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Biometric Shift Employee Management System (Iwcnetwork)

References

• https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md