Cross Site Scripting Vulnerability in Human Resource Management System by Code-Projects
CVE-2026-105188

5.1MEDIUM

Key Information:

Vendor: Code-projects
Status: Human Resource Management System
Vendor: CVE Published:; 5 October 2026

🔔 Create Code-projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-105188?

A vulnerability exists in the Human Resource Management System (HRMS) 1.0 developed by Code-Projects, specifically within the Live Event History component located at /views/admin/liveEventHistory.php. This issue allows for remote exploitation through the manipulation of the 'eventSubject' parameter, leading to cross site scripting (XSS). Attackers can potentially execute arbitrary scripts in the context of affected users' sessions, with possible implications for data integrity and user security. Publicly available exploits heighten the urgency for users to address this vulnerability promptly.

Affected Version(s)

Human Resource Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-105188 - Proof of Concept