PatchTheCVE: hrsale projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-10260: A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privilehttps://patchthecve.com/cve/CVE-2018-10260.htmlhttps://patchthecve.com/cve/CVE-2018-10260.htmlWed, 17 Jun 2026 01:33:47 +0000HIGH 8.8: A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.CVE-2018-10259: An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low prhttps://patchthecve.com/cve/CVE-2018-10259.htmlhttps://patchthecve.com/cve/CVE-2018-10259.htmlWed, 17 Jun 2026 01:33:47 +0000MEDIUM 5.4: An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.CVE-2018-10257: A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low levhttps://patchthecve.com/cve/CVE-2018-10257.htmlhttps://patchthecve.com/cve/CVE-2018-10257.htmlWed, 17 Jun 2026 01:33:46 +0000HIGH 8.8: A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.CVE-2018-10256: A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low levhttps://patchthecve.com/cve/CVE-2018-10256.htmlhttps://patchthecve.com/cve/CVE-2018-10256.htmlWed, 17 Jun 2026 01:33:46 +0000HIGH 8.8: A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query.