CVE-2025-40686
Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'employeeid' parameter in/detailview.php.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Analyzed - cve-coordination@incibe.es
- Published
- 2025-07-29
- Last modified
- 2025-07-29
- Weaknesses
- CWE-79
Affected products
- Human Resource Management System (Human Resource Management System)
- Human Resource Management System (Oretnom23)
References
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-human-resource-management-system
