CVE-2025-13420 — itsourcecode Human Resource Management System EventStore.php sql injection
A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file /src/store/EventStore.php. This manip…
Published: 2025-11-19 · CVSS: 6.9 · CVSS 4.0
A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file /src/store/EventStore.php. This manipulation of the argument eventSubject causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7