HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2020-11-24
Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.
CVSS Score
5.3
EPSS Score
0.007
Published
2020-10-29