CVE 10 CRITICAL

HTML Injection in Patika Global Technologies’ HumanSuite_CVE-2025-8276

10 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Description

Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Improper Neutralization of Argument Delimiters in a Command ('Argument Injection'), Improper Control of Generation of Code ('Code Injection') vulnerability in Patika Global Technologies HumanSuite allows Input Data Manipulation, Format String Injection, Reflection Injection, Code Injection.This issue affects HumanSuite: before 53.21.0.

Basic Information

ID CVE-2025-8276
Source TR-CERT
Published Sep 16, 2025 at 14:00
Modified Sep 16, 2025 at 14:27

Affected Product

Vendor Patika Global Technologies
Product HumanSuite
Affected Versions Patika Global Technologies HumanSuite 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.