Threats tagged 'ghsa-j95x-qfc5-mfv5'

CVE-2026-108708 is a missing authorization vulnerability in Wukong_HRM version 0. This flaw allows any authenticated low-privileged employee to gain HR administrator privileges improperly, enabling them to access sensitive data such as payslips, salary records, and bank cards. Additionally, they can edit bank card information and delete employees, departments, and contracts across the company.