Browse CVEs

MEDIUM 6.1 CVE-2026-3049 A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/global_searc… Horilla 1.0.3+ Fix from $1,6002026-02-24 MEDIUM 5.4 CVE-2026-3050 A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of the compon… Horilla 1.0.3+ Fix from $1,6002026-02-24 HIGH 8.1 CVE-2026-24038 Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the OTP handling logic has a flawed equality check that … Horilla No fix yet Fix from $1,9502026-01-22 MEDIUM 5.4 CVE-2026-24034 Horilla is a free and open source Human Resource Management System (HRMS). In versions prior to 1.5.0, a cross-site scripting vulnerability can be tr… Horilla 1.5.0+ Fix from $1,6002026-01-22 MEDIUM 5.4 CVE-2026-24037 Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the has_xss() function attempts to block XSS by matching… Horilla No fix yet Fix from $1,6002026-01-22 MEDIUM 5.3 CVE-2026-24036 Horilla is a free and open source Human Resource Management System (HRMS). Versions 1.4.0 and above expose unpublished job postings through the /recr… Horilla Patch available Fix from $1,6002026-01-22 HIGH 8.0 CVE-2026-24010 Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Soci… Horilla 1.5.0+ Fix from $1,9502026-01-22 CRITICAL 9.9 CVE-2025-59832 Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket … Horilla 1.4.0+ Fix from $2,3002025-09-25 MEDIUM 6.1 CVE-2025-59525 Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, improper sanitization across the application allow… Horilla 1.4.0+ Fix from $1,6002025-09-24 MEDIUM 6.1 CVE-2025-59524 Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, the file upload flow performs validation only in t… Horilla 1.4.0+ Fix from $1,6002025-09-24 HIGH 7.5 CVE-2025-48869 Horilla is a free and open source Human Resource Management System (HRMS). Unauthenticated users can access uploaded resume files in Horilla 1.3.0 by… Horilla No fix yet Fix from $1,9502025-09-24 HIGH 7.2 CVE-2025-48868 Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horil… Horilla Patch available Fix from $1,9502025-09-24 MEDIUM 6.1 CVE-2025-47789 Horilla is a free and open source Human Resource Management System (HRMS). In versions up to and including 1.3, an attacker can craft a Horilla URL t… Horilla 1.3.1+ Fix from $1,6002025-05-15 HIGH 8.8 CVE-2024-12138 A vulnerability classified as critical was found in horilla up to 1.2.1. This vulnerability affects the function request_new/get_employee_shift/creat… Horilla after 1.2.1 Fix from $1,9502024-12-04