Websoft Hcm

websoft_hcm

Vendor: Websoft • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-46906 1Websoft 1Websoft Hcm Jun 17, 2026 Dec 12, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm...Show more Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.Show less
CVE-2022-46905 1Websoft 1Websoft Hcm Jun 17, 2026 Dec 12, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript progra...Show more Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.Show less
CVE-2022-46904 1Websoft 1Websoft Hcm Jun 17, 2026 Dec 12, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm...Show more Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS.Show less
CVE-2022-46903 1Websoft 1Websoft Hcm Jun 17, 2026 Dec 12, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm...Show more Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS.Show less