← Back

Hrsale

hrsale

Vendor: Hrsale • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-29053
1Hrsale
1Hrsale
Jun 17, 2026
Nov 24, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.
CVE-2020-27993
1Hrsale
1Hrsale
Jun 17, 2026
Oct 29, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.