Not sure where you're based, but data protection laws are probably similar around the world.
CVs usually have quite a lot of sensitive information that people don't want leaking out. If people can upload their phone numbers, locations etc then that is quite a good target for attackers, or even just accidental vibecoded mistakes.
You can make a decent enough start on it, but I wouldn't start using it for real applicants until it has been thoroughly scrutinised by a professional, a pentest would be good and also just getting some experienced programmer to skim the codebase
CVs usually have quite a lot of sensitive information that people don't want leaking out. If people can upload their phone numbers, locations etc then that is quite a good target for attackers, or even just accidental vibecoded mistakes.
You can make a decent enough start on it, but I wouldn't start using it for real applicants until it has been thoroughly scrutinised by a professional, a pentest would be good and also just getting some experienced programmer to skim the codebase