CVE-2026-12130

Name of the Vulnerable Software and Affected Versions CodeAstro Human Resource Management System version 1.0

Description A security flaw in the Projects Management Page component allows for remote cross-site scripting (XSS), which is a technique where malicious scripts are injected into trusted websites. The issue exists within the '/Projects/Add Projects' endpoint and is triggered by the manipulation of the protitle argument.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.