CVE-2022-25015

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-25015
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-25015.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-25015
Published
2022-02-28T19:15:12.527Z
Modified
2025-11-14T13:04:44.162827Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the First Name field.

References

Affected packages

Git / github.com/gamonoid/icehrm

Affected ranges

Type
GIT
Repo
https://github.com/gamonoid/icehrm
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f44b9ec8dd60f42c9e94ac78c55d82244b74b4db

Affected versions

13.*

13.1.OS

v13.*

v13.1.OS

v14.*

v14.0.OS
v14.1.OS

v15.*

v15.0.OS
v15.2.OS

v16.*

v16.0.OS
v16.1.OS

v18.*

v18.0.OS

v19.*

v19.0.OS

v20.*

v20.0.OS
v20.2.OS
v20.3.0.OS

v21.*

v21.0.0.OS
v21.1.0.OS

v23.*

v23.0.0.OS
v23.0.1.OS

v24.*

v24.0.0.OS

v26.*

v26.2.0.OS
v26.6.0.OS

v27.*

v27.0.0.OS
v27.0.1.OS
v27.0.2.OS

v28.*

v28.1.0.OS
v28.1.1.OS
v28.2.0.OS

v29.*

v29.0.0.OS

v30.*

v30.0.0.OS

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-25015.json"