Hrsale vulnerabilities

Products

• Hrsale 3

Newest

• hrsale HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin) CVE-2020-37145 5.1 MediumFebruary 5, 2026
• hrsale HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter. CVE-2020-29053 6.1 MediumNovember 24, 2020
• hrsale Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files. CVE-2020-27993 5.3 MediumOctober 29, 2020