CVE-2019-11033

Applaud HCM 4.0.42+ uses HTML tag fields for HTML inputs in a form. This leads to an XSS vulnerability with a payload starting with the <iframe./> substring.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-05-16

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Applaud Hcm (Applaudsolutions)

References

• https://support.applaudsolutions.com/hc/en-us/articles/203794318-Download-latest-Applaud-HCM-patch
• https://www.applaudsolutions.com/resources/