CVE-2026-105188: code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting

Published Oct 5, 2026

Updated

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used.

Affected Software

1 affected component

Code-projects Human Resource Management System=1.0

Event History

Oct 5, 2026

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges and that user interaction is required. The attack can be launched remotely.

Which deployments should be treated as potentially affected?

Code-projects Human Resource Management System version 1.0 is identified as affected. The issue is associated with the Live Event History component and the /views/admin/liveEventHistory.php file.

What input should be reviewed during triage?

Review handling of the eventSubject argument in the Live Event History functionality. Manipulating this argument can result in cross-site scripting.

How urgent is mitigation?

A public exploit is available and may be used. Although the reported severity is low, exposed instances should be reviewed promptly because exploitation can be initiated remotely.