CVE-2026-13525
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Jun 29, 2026
Vendor
unknown
Description
A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file application/models/Employee_model.php of the component Update_Earn_Leave Endpoint. The manipulation of the argument emid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.