CVE-2019-11559
A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component.
Date published : 2019-09-17
http://seclists.org/fulldisclosure/2019/Sep/28
Reflected XSS in HRworks CVE-2019-11559 pic.twitter.com/46SZNNJ4z0
— Georg Ph E Heise (@gpheheise) September 17, 2019