A vulnerability classified as problematic has been found in HR Performance Solutions Performance Pro 3.19.17. This affects an unknown function. Performing manipulation of the argument Goal Name/Goal Notes/Action Step Name/Action Step Description/Note Name/Goal Description results in cross site scripting.
This vulnerability is cataloged as CVE-2025-60932. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
