What’s Vulnerable › Products

SourceCodester Human Resource Management System vulnerabilities

30 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your SourceCodester Human Resource Management System version is affected

Latest SourceCodester Human Resource Management System vulnerabilities

• CVE-2026-108972 — SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication (CVSS 7.3)
• CVE-2025-40686 — Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System (CVSS 6.1)
• CVE-2025-40685 — Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System (CVSS 6.1)
• CVE-2025-40684 — Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System (CVSS 6.1)
• CVE-2025-40683 — Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System (CVSS 6.1)
• CVE-2025-40682 — SQL injection vulnerability in Human Resource Management System (CVSS 9.8)
• CVE-2024-35469 — (CVSS 9.8)
• CVE-2024-35468 — (CVSS 5.4)
• CVE-2024-34223 — (CVSS 4.3)
• CVE-2024-34222 — (CVSS 5.9)
• CVE-2024-34221 — (CVSS 8.8)
• CVE-2024-34220 — (CVSS 7.5)
• CVE-2023-3391 — SourceCodester Human Resource Management System detailview.php sql injection (CVSS 9.8)
• CVE-2022-4279 — SourceCodester Human Resource Management System employeeview.php cross site scripting (CVSS 6.1)
• CVE-2022-4278 — SourceCodester Human Resource Management System employeeadd.php sql injection (CVSS 7.2)
• CVE-2022-4273 — SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload (CVSS 9.8)
• CVE-2022-45218 — (CVSS 6.1)
• CVE-2022-43262 — (CVSS 9.8)
• CVE-2022-43318 — (CVSS 8.8)
• CVE-2022-43317 — (CVSS 6.1)
• CVE-2022-3502 — Human Resource Management System Leave cross site scripting (CVSS 5.4)
• CVE-2022-3497 — SourceCodester Human Resource Management System Master List cross site scripting (CVSS 5.4)
• CVE-2022-3496 — SourceCodester Human Resource Management System Admin Panel employeeadd.php access control (CVSS 8.8)
• CVE-2022-3493 — SourceCodester Human Resource Management System Add Employee cross site scripting (CVSS 5.4)
• CVE-2022-3492 — SourceCodester Human Resource Management System Profile Photo os command injection (CVSS 8.8)