CVE-2026-86066Medium 5.9Horilla attendance approval endpoint is vulnerable to cross-site request forgery0.2%
CVE-2026-96795High 8.8Horilla: Authenticated RCE in Horilla List-View Export0.4%
CVE-2026-71483High 8.5Horilla: Reflected Cross-Site Scripting (XSS) in Employee Filter View0.3%
CVE-2026-63432Medium 6.5Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata0.4%
CVE-2026-63431Medium 6.5Horilla: Missing Authorization on Payroll Component Views Exposes Employee Salary Structures and Personal Loan Records (IDOR)0.2%
CVE-2026-41513Medium 4.8Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints0.3%