Security Advisory
CVE-2025-12872
5.4
MEDIUM
Vulnerability Description
The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL.
Published Date
November 12, 2025
Official Source
NIST NVD Advisory