CVE-2026-11506
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Jun 08, 2026
Vendor
unknown
Description
A vulnerability has been found in CodeAstro Leave Management System 1.0. This impacts an unknown function of the file /admin/search_staff_for_deletion.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.