CVE-2026-116640

A cross-site scripting (XSS) vulnerability exists in the Saruf-Ratul HR-Payroll-Management-System within the chat.php file. The flaw is caused by improper neutralization of the ID argument, which allows for remote execution of the attack. While the exploit has been published and may be used, the ...