CVE-2024-36656 - In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack

MEDIUM

In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack

Published Jun 14, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.30%

In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
4.0.3	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/minthcm/minthcm/issues/67		ExploitIssue TrackingVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 14, 2024

Updated Aug 2, 2024

Reserved May 30, 2024

Updated Jun 17, 2024

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a