VULNERABILITY INTELLIGENCE

CVE-2021-25838

CVSS score6.1 MEDIUM

EPSS probability0.59%

CISA KEVNot currently listed

Published2021-04-26

Last modified2026-06-17

Description

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.