horilla-opensource — Vulnerabilities & Security Advisories 19

Horilla-opensource is an HR management platform designed for streamlining workforce operations and employee data handling. Historically, the project has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 19 recorded CVEs. Security researchers have identified consistent weaknesses in access controls and input validation, with several critical RCE flaws allowing unauthorized system compromise. While no major public security incidents have been documented, the high concentration of CVEs suggests ongoing challenges in secure development practices, particularly in authentication mechanisms and data sanitization.