Websoft

websoft

5 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-46906 1Websoft 1Websoft Hcm Jun 17, 2026 Dec 12, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm...Show more Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.Show less
CVE-2022-46905 1Websoft 1Websoft Hcm Jun 17, 2026 Dec 12, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript progra...Show more Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.Show less
CVE-2022-46904 1Websoft 1Websoft Hcm Jun 17, 2026 Dec 12, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm...Show more Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS.Show less
CVE-2022-46903 1Websoft 1Websoft Hcm Jun 17, 2026 Dec 12, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm...Show more Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS.Show less
CVE-2004-0625 1Websoft 1Infinity Web Apr 16, 2026 Dec 6, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.