CVE-2026-24034 - Horilla has File Upload XSS

CVE ID : CVE-2026-24034 Published : Jan. 22, 2026, 2:41 a.m. | 1 hour, 4 minutes ago Description : Horilla is a free and open source Human Resource Management System (HRMS). In versions prior to 1.5.0, a cross-site scripting vulnerability can be triggered because the extension and content-type are not checked during the profile photo update step. Version 1.5.0 fixes the issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...