Log in Start free

horilla

Products

ProductCVEsExploitedLatest
horilla-hr6–Sep 25, 2026

Exploited and recent CVEs

  • CVE-2026-86066 Medium 5.9 Horilla attendance approval endpoint is vulnerable to cross-site request forgery 0.2%
  • CVE-2026-96795 High 8.8 Horilla: Authenticated RCE in Horilla List-View Export 0.4%
  • CVE-2026-71483 High 8.5 Horilla: Reflected Cross-Site Scripting (XSS) in Employee Filter View 0.3%
  • CVE-2026-63432 Medium 6.5 Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata 0.4%
  • CVE-2026-63431 Medium 6.5 Horilla: Missing Authorization on Payroll Component Views Exposes Employee Salary Structures and Personal Loan Records (IDOR) 0.2%
  • CVE-2026-41513 Medium 4.8 Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints 0.3%