CVE-2026-105188

3.5 LOWpublic exploit available

Published 2026-10-05 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weaknesses

CWE-79, CWE-94

Public exploit & PoC references

https://github.com/user-attachments/assets/f4902bfb-fc8e-4e4c-8ef8-01fde7c51038

All references

https://code-projects.org/
https://github.com/user-attachments/assets/f4902bfb-fc8e-4e4c-8ef8-01fde7c51038
https://vuldb.com/cve/CVE-2026-105188
https://vuldb.com/submit/971660
https://vuldb.com/vuln/413425
https://vuldb.com/vuln/413425/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-100174PoC
LOWCVE-2026-100311PoC
MEDIUMCVE-2026-100313PoC
MEDIUMCVE-2026-100877PoC
LOWCVE-2026-100880PoC
LOWCVE-2026-100881PoC
LOWCVE-2026-100882PoC
LOWCVE-2026-100904

Related by shared AI tags and CWE weakness class. Browse the full archive.