← Database

CVE-2021-38822

MEDIUM CVSS: 5.4 Published: 2021-10-04 Modified: 2026-06-17

Description

A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary execution of JavaScript commands.

Affected Platforms

Icehrm Icehrm

Weakness Type

CWE-79

References