Low severity3.5NVD Advisory· Published Jun 12, 2026· Updated Jun 15, 2026

CVE-2026-12129

Description

A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/add_tod of the component Dashboard Interface. The manipulation of the argument todo_data leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Codeastro/Human Resource Management Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

codeastro.comnvd
github.com/ashikmd0507/CVE/tree/main/Stored-XSS-via-TO-DO-LISTnvd
vuldb.com/cve/CVE-2026-12129nvd
vuldb.com/submit/837196nvd
vuldb.com/vuln/370614nvd
vuldb.com/vuln/370614/ctinvd

News mentions

CodeAstro: Four SQLi and XSS Bugs Disclosed Across Two Management Systems
Vypr Intelligence · Jun 13, 2026

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000