CVE-2018-12651

PoC —

CVSS 3.0

6.1 medium

EPSS

<1%p56

Published

Dec 20, 2018 (Dec 20, 2018)

Modified

Jun 17, 2026

Description

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the ShiftEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter.

Vendors: myadrenalin
Products: human resource management software
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.