VYPR
Medium severity6.1NVD Advisory· Published May 16, 2019· Updated Jun 17, 2026

CVE-2019-11033

CVE-2019-11033

Description

Applaud HCM 4.0.42+ uses HTML tag fields for HTML inputs in a form. This leads to an XSS vulnerability with a payload starting with the <iframe./> substring.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Applaud/HCMdescription
  • Epicor/HCMllm-fuzzy
    Range: >=4.0.42

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.