Lemeconsultoria HCM Galera.app HTML Injection Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing HTML injection has been identified in Lemeconsultoria HCM Galera.app version 4.58.0. This vulnerability enables an attacker to execute arbitrary code by exploiting various components within the application, including training request solicitations, strategic perspective edits, and several other administrative and educational listings and registrations.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the server or client side, depending on the nature of the injected code and the application's handling of such inputs.

Reproduction

To reproduce this vulnerability, navigate to one of the affected components listed in the description. Inject HTML code into the input fields or request parameters. The injected code will be executed, demonstrating the HTML injection flaw.