← All advisories

Medium severity6.1NVD Advisory· Published Nov 24, 2020· Updated Jun 17, 2026

CVE-2020-29053

CVE-2020-29053

Description

HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.

Affected products

3

HRSALE/HRSALE3 versions
cpe:2.3:a:hrsale:hrsale:2.0.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:hrsale:hrsale:2.0.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: = 2.0.0

Patches

Vulnerability mechanics

References

2

grimthereaperteam.medium.com/hrsale-v-2-0-0-reflected-cross-site-scripting-17a5617e2c6envdExploitThird Party Advisory
hrsale.com/update_log.phpnvdProduct

News mentions

0

No linked articles in our index yet.