CVE-2019-11032

In EasyToRecruit (E2R) before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting (XSS) injection in multiple locations.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-04-24

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Easytorecruit (Hr-technologies)

References

• https://www.excellium-services.com/cert-xlm-advisory/
• https://www.excellium-services.com/cert-xlm-advisory/cve-2019-11032/