Jorani vulnerabilities

Products

• Jorani 11
• Leave Management System 2

Newest

• jorani Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import() CVE-2026-110100 5.3 MediumOctober 13, 2026
• jorani Jorani before 1.0.4 Missing Authorization in HR Export Actions CVE-2026-110099 5.3 MediumOctober 13, 2026
• jorani Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests CVE-2026-110098 5.3 MediumOctober 13, 2026
• jorani A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an... CVE-2025-67102 7.6 HighFebruary 17, 2026
• jorani Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter CVE-2023-53870 5.1 MediumDecember 15, 2025
• jorani leave management system Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated... CVE-2023-48205 5.3 MediumDecember 7, 2023
• jorani leave management system An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary... CVE-2023-45540 Public exploit 6.5 MediumOctober 16, 2023
• jorani SQL Injection on Jorani CVE-2023-2681 8.8 HighOctober 3, 2023
• jorani In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on... CVE-2023-26469 Public exploit EPSS 82.9% 9.8 CriticalAugust 17, 2023
• jorani Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym... CVE-2022-48118 6.1 MediumJanuary 27, 2023
• jorani Benjamin BALET Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-34132 9.8 CriticalJune 27, 2022
• jorani Benjamin BALET Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2022-34134 8.8 HighJune 27, 2022
• jorani Benjamin BALET Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability... CVE-2022-34133 6.1 MediumJune 27, 2022