TVN ID	TVN-202504006
CVE ID	CVE-2025-3706
CVSS	6.1 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products	eHRMS version V202412 and earlier
Description	The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Solution	Please update to version V202412_Z02 or later. For detailed update instructions, please contact 104.
Credit	Linwz(DEVCORE)
Public Date	2025-04-28