CVE-2025-2590
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 21, 2025
Updated: Apr 1, 2025
CWE ID 787
Summary
CVE-2025-2590 is a newly disclosed vulnerability affecting the Human Resource Management System 1.0.1 by code-projects. This issue lies in the UpdateRecruitmentById function of the file recruitment.go, where improper handling of user input results in cross-site scripting (XSS). An attacker can exploit this remotely by manipulating the argument 'c', potentially launching malicious scripts in the browser of unsuspecting users. The exploit for this vulnerability has been made public, increasing the risk of widespread attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- TL-WR841ND
Affected Vendors
- TP-LINK Technologies Co Ltd