PT-2026-48974 · Codeastro · Human Resource Management System

Ashikmd7 · Published 2026-06-12 · Updated 2026-06-12 · CVE-2026-12129

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/add tod of the component Dashboard Interface. The manipulation of the argument todo data leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-12129

Affected Products

Human Resource Management System

References · 7

• 🔥 https://github.com/ashikmd0507/CVE/tree/main/Stored-XSS-via-TO-DO-LIST · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12129 · Security Note
• https://vuldb.com/vuln/370614/cti · Note
• https://vuldb.com/vuln/370614 · Note
• https://vuldb.com/submit/837196 · Note
• https://vuldb.com/cve/CVE-2026-12129 · Note
• https://codeastro.com · Note