Skip to content
JJorani
Products
| Product | CVEs | Exploited | Latest |
| Jorani | 5 | – | Oct 13, 2026 |
Exploited and recent CVEs
-
CVE-2026-110100
Medium 5.4
Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()
0.2%
-
CVE-2026-110099
Medium 4.3
Jorani before 1.0.4 Missing Authorization in HR Export Actions
0.3%
-
CVE-2026-110098
Medium 5.4
Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests
0.2%
-
CVE-2023-53870
Medium 5.1
Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter
0.4%
-
CVE-2023-2681
High 8.8
SQL Injection on Jorani
0.8%