CVE-2026-105173: Code-Projects Human Resource Management

Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.

Affected products

• Code-Projects Human Resource Management: version 1.0 only

Published 2026-10-05. Last modified 2026-10-06.