CVE-2026-105173
LOW
NVD
CVSS Score
3.5
Severity
LOW
Published
Oct 05, 2026
Vendor
unknown
Description
A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.