Minthcm: >> Minthcm Security Vulnerabilities
In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack.
CVSS Score
6.1
EPSS Score
0.008
Published
2024-06-14
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.
CVSS Score
6.1
EPSS Score
0.003
Published
2021-04-26
A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.
CVSS Score
9.8
EPSS Score
0.004
Published
2021-04-26