Skip to main content

Easytorecruit

1 CVEs product

Monthly

CVE-2019-11032 MEDIUM This Month

In EasyToRecruit (E2R) before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting (XSS) injection in multiple locations. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Easytorecruit
NVD
CVSS 3.0
6.1
EPSS
0.9%
EPSS 1% CVSS 6.1
MEDIUM This Month

In EasyToRecruit (E2R) before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting (XSS) injection in multiple locations. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Easytorecruit
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy