Description
The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
aEnrich a+HRD
Default version status: unaffected
0 to ≤ 7.5affected
aEnrich a+HCM
Default version status: unaffected
8.1affected