PatchTheCVE: hrworkshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-16417: HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.https://patchthecve.com/cve/CVE-2019-16417.htmlhttps://patchthecve.com/cve/CVE-2019-16417.htmlWed, 17 Jun 2026 02:22:16 +0000MEDIUM 5.4: HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.CVE-2019-16416: HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.https://patchthecve.com/cve/CVE-2019-16416.htmlhttps://patchthecve.com/cve/CVE-2019-16416.htmlWed, 17 Jun 2026 02:22:16 +0000MEDIUM 5.4: HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.CVE-2019-11559: A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbhttps://patchthecve.com/cve/CVE-2019-11559.htmlhttps://patchthecve.com/cve/CVE-2019-11559.htmlWed, 17 Jun 2026 02:13:10 +0000MEDIUM 6.1: A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component.