CVE-2026-1161

A vulnerability was detected in pbrong hrms 1.0.1. The affected element is the function UpdateRecruitmentById of the file /handler/recruitment.go. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

• CWE-79
• CWE-94

• https://github.com/TheLiao233/cve/issues/1
• https://vuldb.com/?ctiid.341755
• https://vuldb.com/?id.341755
• https://vuldb.com/?submit.736510

Published

Jan 19, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1160A security vulnerability has been detected in PHPGurukul Dir…9.8
• CVE-2026-11600The Envo's Templates & Widgets for Elementor and WooCommerce…4.3
• CVE-2026-11603The Product Filter Widget for Elementor plugin for WordPress…6.1
• CVE-2026-11604An incorrect buffer size calculation in the epoch key genera…6.5
• CVE-2026-11605The issue is a resource exhaustion vulnerability associated …7.5
• CVE-2026-11607Backend users with access to the Form Framework were able to…7.6
• CVE-2026-11610A heap buffer overflow flaw was found in the SASL I/O layer …8.8
• CVE-2026-11611A flaw was found in 389 Directory Server. The Content Synchr…6.5
• CVE-2026-11612Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-11614The Xpro Addons — 140+ Widgets for Elementor plugin for Word…6.4
• CVE-2026-11616The Events Calendar for GeoDirectory plugin for WordPress is…8.8
• CVE-2026-11618A vulnerability was determined in DTStack Taier up to 1.4.0.…7.3