lemeconsultoria HCM galera.app Cross-Site Scripting Vulnerability

A Cross-Site Scripting (XSS) vulnerability has been identified in lemeconsultoria HCM galera.app version 4.58.0. This vulnerability allows an attacker to execute arbitrary code by exploiting multiple components within the application. Affected components include Strategic Planning Perspective Registration, Training Request, Perspective Editing, Education Registration, Hierarchical Level Registration, Decision Level Registration, Perspective Registration, Company Group Registration, Company Registration, News Registration, Employee Editing, Goal Team Registration, Learning Resource Type Registration, Learning Resource Family Registration, Learning Resource Supplier Registration, and Cycle Maintenance.

Impact

Exploitation of this vulnerability allows for Cross-Site Scripting, where an attacker can execute arbitrary code in the context of the user's browser.