A vulnerability described as problematic has been identified in HR Performance Solutions Performance Pro 3.19.17. The impacted element is an unknown function. Such manipulation of the argument Goal Name/Goal Notes/Action Step Name/Action Step Description/Note Name/Goal Description leads to cross site scripting.
This vulnerability is listed as CVE-2025-60933. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
