Low severity3.5NVD Advisory· Published Jun 12, 2026· Updated Jun 15, 2026

CVE-2026-12130

Description

A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of the file /Projects/Add_Projects of the component Projects Management Page. The manipulation of the argument protitle results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Codeastro/Human Resource Management Systemllm-fuzzy
Range: =1.0

Patches

Vulnerability mechanics

References

codeastro.comnvd
github.com/ashikmd0507/CVE/tree/main/Stored-XSS-via-Project-Titlenvd
vuldb.com/cve/CVE-2026-12130nvd
vuldb.com/submit/837202nvd
vuldb.com/vuln/370615nvd
vuldb.com/vuln/370615/ctinvd

News mentions

CodeAstro: Four SQLi and XSS Bugs Disclosed Across Two Management Systems
Vypr Intelligence · Jun 13, 2026

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000