Medium severity6.5NVD Advisory· Published Oct 16, 2023· Updated Jun 17, 2026
CVE-2023-45540
CVE-2023-45540
Description
An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment field of the List of Leave requests page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Jorani/Jorani Leave Management Systemdescription
= 1.0.3+ 1 more
- (no CPE)range: = 1.0.3
- cpe:2.3:a:jorani:leave_management_system:1.0.3:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/soundarkutty/HTML-Injection/blob/main/POC.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.