Medium severity4.3NVD Advisory· Published Jun 29, 2026· Updated Jun 29, 2026

CVE-2026-13537

Description

A vulnerability was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely. The exploit has been made public and could be used.

Affected products

Codeastro/Human Resource Management Systemllm-fuzzy
Range: <=1.0

Patches

Vulnerability mechanics

References

codeastro.comnvd
github.com/ashikmd0507/CVE/tree/main/CSRF%20in%20Department%20Deletion%20Endpointnvd
vuldb.com/cve/CVE-2026-13537nvd
vuldb.com/submit/842084nvd
vuldb.com/vuln/374545nvd
vuldb.com/vuln/374545/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000