Low severity2.4NVD Advisory· Published Jun 8, 2026· Updated Jun 8, 2026

CVE-2026-11491

Description

A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function of the file /notice/All_notice of the component Notice Board Management. Such manipulation of the argument Notice Title with the input as part of POST leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Codeastro/Human Resource Management Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

codeastro.comnvd
github.com/ashikmd0507/CVE/blob/main/CVE-2026-11491/README.mdnvd
vuldb.com/cve/CVE-2026-11491nvd
vuldb.com/submit/834747nvd
vuldb.com/vuln/369111nvd
vuldb.com/vuln/369111/ctinvd

News mentions

Codeastro: Seven SQLi and XSS Vulnerabilities Disclosed Together
Vypr Intelligence · Jun 8, 2026

cvss	0.156
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000