CVE-2026-107790: HireZoot 0 to before 4.1.1

Affected technology

HireZoot · 0 to before 4.1.1
Vendor not specified by the source

Description’s affected range: before 4.1.1 does not sanitise and escape some of its stored data before outputting it in the admin dashboard

Component: Not specified by the source

The source does not specify what an attacker can achieve.

Published 21-Oct-2026 07:00 UTC

GitHub Advisory Database · Source record · observed 2026-10-21 07:07:14.882325+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-21 07:00:36.165049+00:00 UTC