Reflected XSS on the login page

[manisashank]

Hi Team,

I couldn't find any contact information of @gamonoid on their github profile page so creating an issue here.

Description:
IceHRM application is vulnerable to Reflected cross-site Scripting vulnerability. This is due to the application not properly sanitizing the user input in next parameter on the login page.

Steps to reproduce:

1. Visit the below URL from any browser: https://icehrm.com/app/<any_nickname>/login.php?next=testingforbugs"%20oncontentvisibilityautostatechange=alert(document.domain)%20style=content-visibility:auto>
2. You'll see a pop-up alert

References:
https://portswigger.net/research/xss-in-hidden-input-fields

POC:

Please let me know if you need any additional information.

Thank you.