CVE-2026-11491 | CodeAstro Human Resource Management System 1.0 Add Notice Page /notice/All_notice Notice Title cross site scripting

A vulnerability classified as problematic was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function of the file /notice/All_notice of the component Add Notice Page. Such manipulation of the argument Notice Title leads to cross site scripting.

This vulnerability is referenced as CVE-2026-11491. It is possible to launch the attack remotely. Furthermore, an exploit is available.