CVE-2022-46904

—

CVSS 3.1

5.4 medium

EPSS

<1%p27

Published

Dec 12, 2022 (Dec 12, 2022)

Modified

Jun 17, 2026

Description

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS.

Vendors: websoft
Products: websoft hcm
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.