agentprime: horilla-hrEvery new CVE for horilla-hr.https://agentprime.io/CVE-2026-86066: Horilla attendance approval endpoint is vulnerable to cross-site request forgeryhttps://agentprime.io/advisories/CVE-2026-86066/https://agentprime.io/advisories/CVE-2026-86066/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 22:18:13 GMTCVECVE-2026-96795: Horilla: Authenticated RCE in Horilla List-View Exporthttps://agentprime.io/advisories/CVE-2026-96795/https://agentprime.io/advisories/CVE-2026-96795/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 22:17:04 GMTCVECVE-2026-71483: Horilla: Reflected Cross-Site Scripting (XSS) in Employee Filter Viewhttps://agentprime.io/advisories/CVE-2026-71483/https://agentprime.io/advisories/CVE-2026-71483/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 21:59:50 GMTCVECVE-2026-63432: Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadatahttps://agentprime.io/advisories/CVE-2026-63432/https://agentprime.io/advisories/CVE-2026-63432/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 21:58:21 GMTCVECVE-2026-63431: Horilla: Missing Authorization on Payroll Component Views Exposes Employee Salary Structures and Personal Loan Records (IDOR)https://agentprime.io/advisories/CVE-2026-63431/https://agentprime.io/advisories/CVE-2026-63431/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 21:56:00 GMTCVECVE-2026-41513: Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpointshttps://agentprime.io/advisories/CVE-2026-41513/https://agentprime.io/advisories/CVE-2026-41513/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 16:43:50 GMTCVE