Code-Projects Human Resource Management System vulnerabilities

CVE-2025-2589 [CRITICAL] CWE-266 CVE-2025-2589: A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.

CVE-2025-2590 [MEDIUM] CWE-79 CVE-2025-2590: A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been class A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to th

CVE-2026-105188 [LOW] CWE-79 CVE-2026-105188: A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vu A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site scripting. The attack may be launched remotely. The exploit ha