Skip to content
OpenAdvisories

Vendor

horilla

6 known vulnerabilities.

Products

horilla-hr 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-96795

    Horilla: Authenticated RCE in Horilla List-View Export

    Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes field_tuple[1], interpolates it into dynamic_fn_str as Python source, and passes…

    horilla horilla-hr
  • High 8.5
    CVE-2026-71483

    Horilla: Reflected Cross-Site Scripting (XSS) in Employee Filter View

    Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html() in employee/templates/employee_nav.html without HTML neutralization. An external attacker can craft and deliver a link tha…

    horilla horilla-hr