Hrsale

hrsale

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-29053 1Hrsale 1Hrsale Jun 17, 2026 Nov 24, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.
CVE-2020-27993 1Hrsale 1Hrsale Jun 17, 2026 Oct 29, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.