Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pjhm-2qjv-7qpq

Опубликовано: 21 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an attacker to inject HTML tags into the "keresztnév" (firstname) field, which will be sent out in an email resulting in possible Phishing scenarios against any, previously not registered, email address.

HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an attacker to inject HTML tags into the "keresztnév" (firstname) field, which will be sent out in an email resulting in possible Phishing scenarios against any, previously not registered, email address.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS3

Дефекты

CWE-80

Связанные уязвимости

CVSS3: 7
nvd
6 месяцев назад

HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an attacker to inject HTML tags into the "keresztnév" (firstname) field, which will be sent out in an email resulting in possible Phishing scenarios against any, previously not registered, email address.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS3

Дефекты

CWE-80