CVE-2025-2590

216.73.216.197

· Published 21/03/2025 13:15 · Modified 21/03/2025 13:15

Labels: CVE-2025-2590 2025-03-21 CVE-2025-2590 CWE-79 [email protected]

Essential information

Published: 21/03/2025 13:15
Modified: 21/03/2025 13:15
Author: —
Creator: —
CVSS: 4.8 MEDIUM (v3) 4.8 MEDIUM (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

NVD status

Status: Undergoing Analysis — CVE is currently being analyzed by NVD staff, this process results in association of reference link tags, CVSS scores, CWE association, and CPE applicability statements.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
code-projects / human resource management system	`cpe:2.3:a:code-projects:human_resource_management_system:1.0.1:::::::*`