Vulnerabilities > HR Technologies

DATE CVE VULNERABILITY TITLE RISK
2019-04-24 CVE-2019-11032 Cross-site Scripting vulnerability in Hr-Technologies Easytorecruit
In EasyToRecruit (E2R) before 2.11, the upload feature and the Candidate Profile Management feature are prone to Cross Site Scripting (XSS) injection in multiple locations.
network
low complexity
hr-technologies CWE-79
6.1