A vulnerability classified as problematic was found in OpenZ ERP up to 3.6.60. Affected is an unknown function of the component Employee Module. The manipulation of the argument name/description results in cross site scripting.
This vulnerability was named CVE-2020-37022. The attack may be performed from remote. In addition, an exploit is available.
