Horilla Horilla-Hr
6 CVEs affecting Horilla Horilla-Hr. Latest disclosed: 2026-09-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-96795 | High | 8.8 | 2026-09-25 | Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns PO… |
CVE-2026-63432 | Medium | 6.5 | 2026-09-25 | Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the get_mail_preview handlers in recruitment/views/actions.py and employee/not_in_out_dash… |
CVE-2026-63431 | Medium | 6.5 | 2026-09-25 | Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py does not consistently authorize access in allowances_deductions_ta… |
CVE-2026-86066 | | 2026-09-25 | Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/ changes attendance_v… | |
CVE-2026-71483 | | 2026-09-25 | Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html() in employee/templates/… | |
CVE-2026-41513 | | 2026-05-12 | Horilla is an HR and CRM software. In 1.5.0, the notification endpoints trust the unvalidated next parameter and redirect users to arbitrary external URLs. Thi… |