← All advisories

Medium severity6.1NVD Advisory· Published Nov 24, 2020· Updated Jun 17, 2026

CVE-2020-29053

CVE-2020-29053

Description

HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.

Affected products

2

HRSALE/HRSALEdescription
HRSALE/HRSALEllm-fuzzy
Range: = 2.0.0

Patches

Vulnerability mechanics

References

2

grimthereaperteam.medium.com/hrsale-v-2-0-0-reflected-cross-site-scripting-17a5617e2c6envdExploitThird Party Advisory
hrsale.com/update_log.phpnvdProduct

News mentions

0

No linked articles in our index yet.