https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:43:43.998017+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-59525 CVE-2025-59525 — Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover 2026-10-07T04:43:44.014109+00:00

Affected: horilla-opensource horilla

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG (and via allowed <embed>), which can be chained to execute JavaScript whenever users view impacted content (e.g., announcements). This can result in admin account takeover. This issue has been patched in version 1.4.0.