Human Resource Information System version 0.1 suffers from a persistent cross site scripting vulnerability.