Horilla Horilla-hr vulnerabilities
- horilla horilla-hrHorilla attendance approval endpoint is vulnerable to cross-site request forgery5.9 Medium
- horilla horilla-hrHorilla: Authenticated RCE in Horilla List-View Export8.8 High
- horilla horilla-hrHorilla: Reflected Cross-Site Scripting (XSS) in Employee Filter View8.5 High
- horilla horilla-hrHorilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata6.5 Medium
- horilla horilla-hrHorilla: Missing Authorization on Payroll Component Views Exposes Employee Salary Structures and Personal Loan Records (IDOR)6.5 Medium
- horilla horilla-hrHorilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints4.8 Medium