TVN ID	TVN-202501004
CVE ID	CVE-2025-0583
CVSS	6.1 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products	a+HRD version 7.5 and earlier
Description	The a+HRD from aEnrich Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Solution	Please refer to the aEnrich advisory to upgrade to version 6.8 or later and install the latest patches, or contact aEnrich customer service for assistance.
Credit	Linwz (DEVCORE)
Public Date	2025-01-20