CVE-2026-38569

HireFlow v1.2 , an online interview management platform, is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the candidate_detail.html file, specifically within the Resume or Feedback Comment fields. An attacker can trigger the vulnerability by sending malicious input via POST...