CVE-2026-12130
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk10th percentile — higher than 10% of all known CVEs
Summary
A security flaw has been discovered in CodeAstro Human Resource Management System 1.0, affecting an unknown part of the file /Projects/Add_Projects of the Projects Management Page component. Manipulation of the argument protitle results in cross site scripting.
Risk Assessment
An attacker may remotely exploit this vulnerability, posing a serious threat to user data security and system integrity.
Recommendation
It is recommended to immediately update the CodeAstro system to the latest version and implement appropriate measures to protect against XSS attacks.
Original NVD description (English source)
A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of the file /Projects/Add_Projects of the component Projects Management Page. The manipulation of the argument protitle results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.