Jorani

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 10
    Known Exploited: 0
    2
    Critical Level Threats
    3
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-67102

    A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL commands via the entity parameter.

    Last Modified: Apr 03, 2026
    Published: Feb 17, 2026

    CVE-2023-53870

    Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter

    Last Modified: Apr 15, 2026
    Published: Dec 15, 2025

    CVE-2023-48205

    Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails.

    Last Modified: Nov 21, 2024
    Published: Dec 07, 2023

    CVE-2023-45540

    An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment field of the List of Leave requests page.

    Last Modified: Nov 21, 2024
    Published: Oct 16, 2023

    CVE-2023-2681

    SQL Injection on Jorani

    Last Modified: Nov 21, 2024
    Published: Oct 03, 2023
    Items Per Page