CVE-2025-51989

7.0 highEPSS 0.4%

High (7.0). EPSS 0.4% chance of exploitation in the next 30 days.

HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an attacker to inject HTML tags into the "keresztnév" (firstname) field, which will be sent out in an email resulting in possible Phishing scenarios against any, previously not registered, email address.

Severity

CVSS 3.1

7.0 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-80
Published: 2025-08-21
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

References

https://github.com/Apor/Vulnerabilities/tree/main/CVE-2025-51989
https://hrmaster.hu/modulok/toborzas-es-kivalasztas
https://www.evolution-consulting.hu/

Check your stack JSON