← back
CVE-2025-51989

CVE-2025-51989

CVSS 7 HIGHEPSS 0.4%CWE-80
HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an attacker to inject HTML tags into the "keresztnév" (firstname) field, which will be sent out in an email resulting in possible Phishing scenarios against any, previously not registered, email address.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://evolution.comhttp://hrmaster.comhttps://github.com/Apor/Vulnerabilities/tree/main/CVE-2025-51989https://hrmaster.hu/modulok/toborzas-es-kivalasztashttps://www.evolution-consulting.hu/