Medium severity6.1NVD Advisory· Published Mar 25, 2019· Updated Jun 17, 2026

CVE-2018-12652

Description

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the LeaveEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Adrenalin/HRMSllm-fuzzy
Range: 5.4

Patches

Vulnerability mechanics

References

www.knowcybersec.com/2019/02/CVE-2018-12652-reflected-XSS.htmlnvdExploitThird Party Advisory
www.securethy.com/2019/02/CVE-2018-12652-reflected-XSS.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000