CVE-2026-105188
code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting
CVSS Score
3.5
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used.
| CWE | CWE-79 CWE-94 |
| Vendor | code-projects |
| Product | human resource management system |
| Published | Oct 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for code-projects human resource management system
Be the first to know when new low vulnerabilities affecting code-projects human resource management system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
code-projects / Human Resource Management System
1.0
References
vuldb.com: https://vuldb.com/vuln/413425 vuldb.com: https://vuldb.com/vuln/413425/cti vuldb.com: https://vuldb.com/cve/CVE-2026-105188 vuldb.com: https://vuldb.com/submit/971660 github.com: https://github.com/user-attachments/assets/f4902bfb-fc8e-4e4c-8ef8-01fde7c51038 code-projects.org: https://code-projects.org/
Credits
🔍 ahmad-masa10 (VulDB User)