CVE-2025-3706

The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

Score

CVSS 3.1 6.1 Medium

Status

Deferred - twcert@cert.org.tw

Published

2025-04-28

Last modified

2025-04-28

Weaknesses

CWE-79

Affected products

• Ehrms (104 Corporation)

References

• https://www.twcert.org.tw/en/cp-139-10080-31e4b-2.html
• https://www.twcert.org.tw/tw/cp-132-10079-f0958-1.html