Code-Projects Human Resource Management vulnerabilities

CVE-2025-2589 [CRITICAL] CWE-266 CVE-2025-2589: A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.

CVE-2025-2590 [MEDIUM] CWE-79 CVE-2025-2590: A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been class A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to th

CVE-2026-105173 [LOW] CWE-79 CVE-2026-105173: A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part o A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attack may be launched remotely. The exploit has been publish