[ Vendor · 5 CVEs ]
horilla
CVEs affecting horilla published in the last 30 days, plus any horilla CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96795 | 25 Sep 2026 | CVSS 8.8 | horilla-hrHorilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's… | |
| CVE-2026-86066 | 25 Sep 2026 | CVSS 5.9 | horilla-hrHorilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/ changes… | |
| CVE-2026-71483 | 25 Sep 2026 | CVSS 8.5 | horilla-hrHorilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html() in… | |
| CVE-2026-63431 | 25 Sep 2026 | CVSS 6.5 | horilla-hrHorilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py does not consistently authorize access in… | |
| CVE-2026-63432 | 25 Sep 2026 | CVSS 6.5 | horilla-hrHorilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the get_mail_preview handlers in recruitment/views/actions.py and… |