Skip to content
OpenAdvisories

Vendor

horilla-opensource

19 known vulnerabilities.

Products

horilla 19
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-48868 Public exploit

    Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive

    Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval() function on a user-controlled query parameter in the project…

    horilla-opensource horilla