Threats tagged 'ghsa-qrm8-6428-fgf7'

A stored cross-site scripting (XSS) vulnerability exists in HUMANIST Digital Human Resources software by Bilin Software and Informatics Consultancy Inc. This vulnerability affects versions from 26.0 up to but not including 26.1. It involves improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity. No known exploits are reported in the wild. No official patch or remediation details are currently provided.