CVE-2022-27107

OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo[linkAddress]" parameter

published April 6, 2022

CVSS
—
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo[linkAddress]" parameter

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00487 · 41.0th percentile
Published
2022-04-06T14:39Z
EPSS history
Timeline
  • 06 APR 14:39Z
    OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo[linkAddress]" parameter
    cvelistv5