CVE-2021-22854: Hr Portal Project Hr Portal

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.

Affected products

• Hr Portal Project Hr Portal: version 7.3.2020.1013 only

Published 2021-02-17. Last modified 2026-06-17.