VULNERABILITY INTELLIGENCE

CVE-2026-71483

CVSS score8.5 HIGH

EPSS probability0.24%

CISA KEVNot currently listed

Published2026-09-25

Last modified2026-09-29

Description

Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html() in employee/templates/employee_nav.html without HTML neutralization. An external attacker can craft and deliver a link that causes JavaScript to execute when an au…