CVE-2026-38569
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
May 11, 2026
Vendor
unknown
Description
HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate_detail.html via the Resume or Feedback Comment fields via POST /candidates/add or POST /feedback/add.