CVE Tools
Track your stack

Human Resource Management System

44 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Human Resource Management System, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Human Resource Management System CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Human Resource Management System CVEs per month
MonthCVEs
2024-110
2024-121
2025-010
2025-020
2025-032
2025-041
2025-050
2025-060
2025-075
2025-080
2025-090
2025-100
2025-112
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-067
2026-070
2026-080
2026-090
2026-102

Severity

How the 44 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical37%
  • High920%
  • Medium2352%
  • Low920%

Latest CVEs

The 15 most recently published vulnerabilities affecting Human Resource Management System.

  1. CVE-2026-108972SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication7.3
  2. CVE-2026-105188code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting3.5
  3. CVE-2026-13537CodeAstro Human Resource Management System cross-site request forgery4.3
  4. CVE-2026-13535CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection6.3
  5. CVE-2026-13525CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection6.3
  6. CVE-2026-12131CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection6.3
  7. CVE-2026-12130CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting3.5
  8. CVE-2026-12129CodeAstro Human Resource Management System Dashboard add_tod cross site scripting3.5
  9. CVE-2026-11491CodeAstro Human Resource Management System Notice Board Management All_notice cross site scripting2.4
  10. CVE-2025-13421itsourcecode Human Resource Management System NoticeStore.php sql injection7.3
  11. CVE-2025-13420itsourcecode Human Resource Management System EventStore.php sql injection7.3
  12. CVE-2025-40686Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System6.1
  13. CVE-2025-40685Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System6.1
  14. CVE-2025-40684Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System6.1
  15. CVE-2025-40683Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System6.1

Product grouping is registry-driven, with AI assist and human review. How it works