PT-2026-47253 · Codeastro · Human Resource Management System

Ashik Mohamed + 1 · Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-11491

NVD

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function of the file /notice/All notice of the component Notice Board Management. Such manipulation of the argument Notice Title with the input as part of POST leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-11491

Affected Products

Human Resource Management System

References · 7

• 🔥 https://github.com/ashikmd0507/CVE/blob/main/CVE-2026-11491/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11491 · Security Note
• https://vuldb.com/submit/834747 · Note
• https://vuldb.com/vuln/369111 · Note
• https://vuldb.com/vuln/369111/cti · Note
• https://vuldb.com/cve/CVE-2026-11491 · Note
• https://codeastro.com · Note