horilla vulnerabilities
6 published CVEs name horilla among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-86066
Horilla attendance approval endpoint is vulnerable to cross-site request forgery
horilla · horilla-hr
Medium5.9 - CVE-2026-96795
Horilla: Authenticated RCE in Horilla List-View Export
horilla · horilla-hr
High8.8 - CVE-2026-71483
Horilla: Reflected Cross-Site Scripting (XSS) in Employee Filter View
horilla · horilla-hr
High8.5 - CVE-2026-63432
Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata
horilla · horilla-hr
Medium6.5 - CVE-2026-63431
Horilla: Missing Authorization on Payroll Component Views Exposes Employee Salary Structures and Personal Loan Records (IDOR)
horilla · horilla-hr
Medium6.5 - CVE-2026-41513
Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints
horilla · horilla-hr
Medium4.8