CVEvulnerability
CVE-2025-51989
7.0 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-08-21
- Last modified
- 2026-07-05
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.0 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
- Weaknesses
- CWE-80
Description
HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an attacker to inject HTML tags into the "keresztnév" (firstname) field, which will be sent out in an email resulting in possible Phishing scenarios against any, previously not registered, email address.
Related
Weakness · CWE (1)
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness
References
- https://github.com/Apor/Vulnerabilities/tree/main/CVE-2025-51989 github.com
- https://hrmaster.hu/modulok/toborzas-es-kivalasztas hrmaster.hu
- https://www.evolution-consulting.hu/ www.evolution-consulting.hu